Visa Cloud Token Framework

Visa Cloud Token Framework (CTF) is a Visa proprietary framework. It enhances security and trust for e-commerce token transactions.

CTF extends Visa Token Service (VTS) with APIs that a token requestor can use to send specific requests to the issuer.

CTF adds two capabilities:

• Device binding

• Cardholder verification

Visa Cloud Token Framework (CTF) overview

Device binding

Device binding lets the token requestor ask the issuer to bind a token to the device where the card tokenization occurred.

This helps prevent using a token on a different device. A device mismatch can indicate fraud risk.

Visa makes device binding Optional for token requestors.

Cardholder verification

Cardholder verification lets the token requestor ask the issuer to verify the end user at any time after card tokenization. It can be used with or without device binding.

This provides a way to authenticate the end user when the token requestor detects suspicious activity.

Visa requires token requestors to support cardholder verification. The token requestor decides when to invoke it.