Payment Tokenization

Payment tokenization technology and platform solutions

Secure payment transactions on all devices and for all use-cases for all your cardholders

  • Enterprise
  • Financial services
  • Digital payment solutions

Payment tokenization is a security process that replaces sensitive credit card numbers (PANs) with a unique, randomized string of characters called a token. Thales EMV tokenization applies this principle to digitise physical and virtual payment cards into unique digital identifier tokens - securing every transaction online, in-app or in-store, on any device.

D1 Developer Portal

The foundation of all digital payment experiences

Tokenization enables the most secure, seamless and convenient transactions on all devices for all cardholders

  1. Tokenization lifecycle

    From token creation securing cards with a unique alternative PAN, to digitisation including end-user verification and provisioning to any device, our payment tokenization services manage the complete lifecycle of the tokens, backed by Thales D1 platform.

  2. Scheme-agnostic

    We support international card networks such as Visa, Mastercard, Amex and Discover as well as domestic schemes in more than 65 countries.

  3. Digital wallets

    From the major OEM wallets (Apple Pay, Google Pay, Samsung Pay) to merchants and wearables, we support all types of card provisioning. Converting your mobile banking app into a mobile payment wallet for all your cardholders is a no brainer, for both iOS and Android.

    This same digital wallet experience extends to proximity NFC payments through our HCE Digital Wallets solution.

What is payment tokenization and how does it work?

Payment tokenization replaces a cardholder’s original data (the card number, expiry date and other card details) with a unique token that carries no exploitable value outside the transaction it was created for. When a customer initiates a transaction, their card data is sent to a token service provider, which generates the token; the merchant then stores and uses this token, rather than the actual card number, for authorization, while the sensitive information remains locked in the provider’s protected vault. By combining tokenization and encryption, this token services architecture keeps payment security intact at every point of sale and across every online channel. 

  • Payment passkeys: a 101 guide for issuers

A woman smiling at the camera

© 123RF

Tokenization vs. encryption

Although often mentioned together, tokenization and encryption protect data in fundamentally different ways. Encryption relies on an algorithm to transform card data into a reversible format that can be restored with the correct decryption key, meaning the sensitive information still exists within the system in a scrambled state. 

Tokenization is inherently irreversible: it removes the original data from the environment entirely and replaces it with a randomly mapped token that holds no intrinsic or exploitable value. Pioneered in the early 2000s to secure stored client credentials against the rising threat of database breaches, tokenization ensures that even a compromised system exposes nothing usable to an attacker. 

Payment token types and architectures

Choosing the right token solution depends on how a business handles transaction processing end to end, from a single online checkout to a global network of point-of-sale terminals. 

New Forrester study commissioned by Thales

What does the future of payment tokenization look like? Drawing on insights from more than 500 senior decision makers, this Thought Leadership Paper explores how organizations are advancing payment tokenization and token management strategies. It reveals the gap between ambition and execution, highlighting the challenges organizations must overcome to unlock the full potential of tokenization. Discover what it takes to move toward a truly token-centric future and prepare for the next generation of secure digital and AI-driven payments.

The state of payment Tokenization

© thales

The Total Economic Impact™ Of Thales Tokenization

© Jubemo - Thales

The Total Economic Impact™ of Thales Tokenization

As digital wallets, Click to Pay, payment passkeys and AI-driven commerce evolve, organisations are rethinking PAN-centric architectures in favor of token-centric infrastructures built for innovation at scale. Four Thales customers shared how they turned tokenization into a strategic business enabler, delivering measurable benefits while preparing for the next generation of payment experiences.

With a single integration, our D1 platform lets you deploy all tokenization use cases, from OEM wallets to Click to Pay and Payment Passkey, or transform your mobile banking app into an advanced payment wallet. Enhance and simplify digital payment experiences for your cardholders while reducing fraud and ensuring secure transactions on all devices and at points of sale.

Deploy all tokenization use cases in just a few months from a single cloud platform

© iStock

Are password-free, number-free payments the new standard for online checkout?

In this fireside chat, Mastercard and Thales discuss how issuers can move beyond passwords and card numbers to deliver secure, frictionless online payments, using technologies such as Click to Pay, passkeys, tokenization, and biometrics.

How tokenization secures payments as AI agents shop on our behalf

AI agents are entering the checkout flow, but how do payments remain secure? In this interview with PYMNTS, François Chaffard, VP Digital Payment Services at Thales, breaks down how tokenization safeguards agent-driven payment journeys, balancing automation, speed and trust in the era of agentic commerce.

Financial Services – See all digital and physical payment solutions

Key Figures

#1 leader in physical & digital card services

95%
success rate on green flow tokenization
#1
alternative to Apple Pay on iPhone worldwide
350M
active cards on D1 platform in 2025

Our customers’ success journeys

© Thales

2026 Juniper Research Gold Prize: Best Network Tokenization Solution

Thales D1 won Gold for Best Modern Card Issuing Platform at the 2026 Juniper Research Fintech & Payments Awards, recognizing its digital-first, real-time and secure payment innovations.

Related payment solutions

Private Label Issuers

EMV modern card issuance on both physical and digital channels

  • Enterprise
  • Financial services
  • Digital payment solutions
Physical card issuing

Physical card issuance

Shape modern card journeys with greater agility, visibility and control.

  • Enterprise
  • Financial services
  • Digital payment solutions
Payment Transaction control

Transaction control

Give cardholders more control while protecting every transaction.

  • Enterprise
  • Financial services
  • Digital payment solutions
Digital payment card issuing

Digital issuing

Meet modern and mobile-centric consumers' expectations with real-time services.

  • Enterprise
  • Financial services
  • Digital payment solutions
Thales mobile ticketing for transit operators

​​​​​​​Enhancing mobility for millions

Thales D1 platform for Automated Fare Collection Systems

  • Enterprise
  • Financial services
  • Digital payment solutions

Digital wallets

Digitise payment cards, physical or virtual, into HCE digital wallets for NFC Payments

  • Enterprise
  • Financial services
  • Digital payment solutions
Thales Mobility solutions

Transforming mobility for public and private sectors

Enabling sustainable travel with digital ticketing, MaaS and flexible payments.

  • Enterprise
  • Financial services
  • Digital payment solutions

Thales for Domestic Payment Schemes

Enhance your domestic payment scheme with secure, modular payment solutions

  • Enterprise
  • Financial services
  • Digital payment solutions

Thales for payment card issuers and banks

Revolutionise payment with our comprehensive solutions

  • Enterprise
  • Financial services
  • Digital payment solutions

Contact us for more information about our solutions

Frequently asked questions about payment tokenization