Tokenize a card
Overview
Tokenization creates a digital card from a funding card (FPAN) and provisions it in your digital wallet application.
During Tokenization, you typically:
Capture card credentials.
Check card eligibility.
Present the terms and conditions (T&C) and record the end user’s acceptance.
Digitize the card to create a digital card.
Depending on your program, the terms and conditions (T&C) might not be required.
Capture card credentials
Card credentials can be provided by:
Issuer backend. For example, when the digital wallet application is an issuer application.
End user, via manual entry or camera scan. For example, when your digital wallet application is an open wallet (supporting cards from multiple issuers).
Treat FPAN, expiry date, and CSC as sensitive data. Never log them. Only send them in encrypted form.
Issuer Tokenization decision
During digitization, the issuer approves or declines Tokenization.
The issuer Tokenization decision can be:
Green: Approve Tokenization without step-up authentication.
Yellow: Approve Tokenization with step-up authentication (ID&V).
Red: Decline Tokenization.
When the end user enters card details manually, the issuer Tokenization decision is typically Yellow and requires step-up authentication (ID&V).
User experiences
Green flow
Typical flow:
End user selects a card to digitize.
End user accepts the terms and conditions (optional).
Issuer backend approves Tokenization with no conditions.
The digital wallet application shows the digital card, ready to pay.
Yellow flow
Typical flow:
The end user enters card information (manual entry or camera scan).
The end user accepts the terms and conditions.
The issuer backend approves Tokenization with conditions (step-up authentication required).
The digital wallet application displays the available ID&V methods.
The end user selects an ID&V method and completes ID&V
After successful ID&V, the digital wallet application displays the digital card, ready to pay.
Implementation guides
Implement these steps in order:
Check whether the card is eligible and retrieve the applicable T&C.
Digitize the card to create a digital card.
Complete wallet enrollment before you start Tokenization. See Enroll wallet.
Last updated
Was this helpful?