EMV Payment Tokenisation replaces a card’s primary account number (PAN) with a payment token that is constrained in how it can be used — to a specific merchant, device or payment scenario — so a stolen token is worth far less than a stolen card number. The EMVCo Technical Framework defines the roles (Token Service Providers, Token Requestors, BIN Controllers), the Payment Account Reference that links tokens back to an account, and the domain restrictions and cryptograms that protect each use. It is the foundation of mobile wallets and card-on-file tokens.
EMV Payment Tokenisation
EMV Payment Tokenisation is why a phone wallet or a saved card at a large merchant rarely exposes the real card number. The card’s PAN is swapped for a payment token that only works in a defined domain — one merchant, one device, one channel — so if it leaks, it is useless almost everywhere else.
- Token Service Providers - The parties, registered with EMVCo under a TSP code, that issue tokens and map them back to accounts.
- Token Requestors - Wallets, merchants and processors that request tokens for their use case.
- Payment Account Reference (PAR) - A stable reference that links every token for an account, so merchants can recognize a customer without holding the PAN.
- Domain restrictions and cryptograms - Each token is bound to where and how it can be used, with transaction cryptograms proving legitimate use.
Tokenisation is the part of card security that shows up most directly in payment APIs — card-on-file endpoints, network-token provisioning, wallet integrations. It is also one of the EMV technologies EMVCo named for enhancement in its 2026 agentic payments framework, because a token scoped to an agent and a budget is an obvious way to delegate spending safely.
Industry: Payments
Related standards
Standards this one builds on, supersedes, profiles or is commonly deployed beside.
EMV
The specification family.
EMV Secure Remote Commerce
SRC checkout is designed to work with tokens.
EMV Agentic Payments Framework
Named for potential agentic enhancements.
