Payment Tokenization
How real card numbers (FPAN) are replaced by tokens (DPAN) for digital wallets, card-on-file, and IoT payments. Covers the full lifecycle, cryptogram generation, and the Visa VTS vs. Mastercard MDES service comparison.
Tokenization Use Cases
Payment tokens enable new form factors and reduce fraud risk across a wide range of payment scenarios — from retail NFC to connected devices.
Mobile Wallets
Apple Pay, Google Pay, and Samsung Pay use network tokenization to provision a DPAN to the device's Secure Element (Apple, Samsung) or cloud (Google HCE). The wallet stores the DPAN and LUK. At payment time, the device generates a cryptogram — the real card number is never transmitted to the merchant or terminal. In-store: NFC contactless (ISO 14443). In-app: SDK-generated token + cryptogram in payment request.
Card on File (Merchant Token)
Instead of storing the real PAN for recurring charges or 1-click checkout, the merchant requests a merchant-scoped DPAN from the TSP. Subsequent charges use the DPAN. If the merchant is breached, only that merchant's token is exposed — the cardholder's real card and other merchant tokens are unaffected. When the physical card is reissued, the TSP can update the DPAN mapping automatically (account updater service), so subscriptions continue without interruption.
Push Payments & Disbursements
Tokenization enables pushing funds to a cardholder's account without the payer knowing the recipient's real PAN. The payer's system sends to a DPAN; the TSP routes the push to the FPAN. Used in gig economy payouts, insurance disbursements, and government benefit transfers. The recipient's card number is never shared with the sender.
IoT & Connected Devices
Smart TVs, connected cars, smart refrigerators, and subscription devices can be provisioned with a device-scoped token that is valid only for payments from that specific device. The IoT device stores a DPAN and LUK, enabling autonomous payments (auto-refill, subscription renewal) without ever knowing the real card number. Domain restrictions ensure the fridge token cannot be used for a car purchase.