What is card tokenisation? How your card number is kept safe

By SendPay Business · · 2 min read

What is card tokenisation? How your card number is kept safe

Tokenisation swaps a real card number for a stand-in number, called a token, that's only useful in one place. If the token is stolen, it can't be used like the real card, which is why phone wallets and saved-card checkouts use it.

How it worksWhere you meet itWhy it matters for businesses

How it works

  1. A card is added to a phone wallet or saved with a shop.
  2. The card network or a provider creates a token linked to the real card.
  3. Payments use the token; only the network and the issuer can link it back to the card.
  4. If the card is replaced, the token can often be updated so payments keep working.

Where you meet it

Every time you pay with a phone or watch, you're using a token. Many online shops and subscription services also store a token rather than your card number, so a data breach at the shop doesn't expose the card.

Why it matters for businesses

Tokens reduce the card data a business has to protect, can lower fraud, and help recurring payments keep working when cards expire.

Where SendPay fits

SendPay platforms include cards, payment links and subscriptions under your own brand, powered by licensed partners. You can preview your platform before you pay.

Build it

Create your own financial platform.

Pick a template, name it, brand it, preview every page before you pay. Your brand, your users, your fees.

Build my platform →

Questions people ask

Does a card number pass the Luhn check?

Check a number and see its network.

Card number checker →
What is a digital wallet?

How phones store cards for payment.

What is a digital wallet? →
What is Strong Customer Authentication?

The extra check on many online payments.

What is SCA? →
What is recurring billing?

How subscription payments are taken.

What is recurring billing? →

Read next

This guide is general information, not legal or financial advice. SendPay Business is a technology company, not a bank, and does not take deposits; regulated services on the platforms are provided by licensed partners. PayPal, Patreon and Substack are named as reference points only and are not affiliated with SendPay Business.