Tokenisation

Tokenisation works by substituting a card's primary account number (PAN) with a surrogate value, the token, that has no exploitable relationship to the underlying card data. The token is generated by the tokenisation system and stored in a token vault alongside the encrypted original PAN. When a subsequent transaction needs to be processed, the merchant presents the token; the vault retrieves and decrypts the PAN and passes it to the acquirer.

There are two main categories of payment token. Gateway tokens are generated and managed by a payment provider or processor, they are specific to that provider and cannot be used elsewhere. Network tokens are issued directly by card networks (Visa Token Service, Mastercard Digital Enablement Service) and are scheme-level credentials that follow the card rather than the provider relationship.

Tokenisation serves two distinct purposes in payment infrastructure. First, it removes card data from the merchant's environment. If the merchant never stores or processes the raw PAN, their PCI DSS scope is dramatically reduced. Second, it enables stored credentials, the merchant retains a token they can charge against in future without asking the cardholder to re-enter their details, which is the foundation of subscription billing and one-click checkout.

The token itself is useless to an attacker who intercepts it without access to the vault. This is the security property that makes tokenisation effective for reducing breach impact.

PCI scope reduction is the primary compliance benefit: merchants that tokenize at the point of capture and never store raw PANs can remove large portions of their infrastructure from PCI scope, reducing audit complexity and the blast radius of a data breach.

Token portability determines switching cost: gateway tokens are provider-specific. If a merchant switches payment provider and cannot migrate their token vault, they lose stored card relationships with all existing customers, forcing cardholders to re-enter their details. This is a significant lock-in mechanism.

Network tokens outperform gateway tokens on approval rates: because network tokens are issued by the card network and updated automatically when cards are reissued or replaced, they have higher approval rates on stored-credential transactions than gateway tokens backed by potentially stale PAN data.

Tokenisation is foundational for subscription and marketplace models: any merchant charging stored cards on a recurring basis, subscriptions, marketplaces, platforms, requires a reliable token vault. The quality of that vault directly affects recurring authorisation rates.