Skip to content

Network Tokens

Charge saved cards with the network's own token.

Visa and Mastercard tokens replace the card number on every saved card. They stay valid when the card is reissued, and every payment carries a fresh cryptogram.

Talk to salesSee the vault
Card number
4242 •••• •••• 4242
Stays in your vault
Network token
4895 •••• •••• 0016
Issued by Visa or Mastercard
Charge 1New cryptogram
AgAAAAAAB8n1Qx…

Valid for one payment only. A copied token is useless on its own.

2
card networks, Visa Token Service and Mastercard MDES
1
cryptogram per payment, never reused
0
card updates to chase when a bank reissues a card
Any
processor you route to, the token comes with the card

Why network tokens

A saved card that keeps working, and is harder to steal.

Survives reissued cards

When a card expires or is replaced, the network updates the token behind the scenes. Your saved card keeps working.

A cryptogram per payment

Each charge carries a one-time cryptogram the issuer can verify, so the token cannot be replayed on its own.

Less to lose in a breach

A network token is bound to your business. Outside it, a stolen token is worthless.

Routed like any card

Tokens live in your vault next to the card, so routing rules and failover apply to tokenised payments too.

Provisioned on save

When a customer saves a Visa or Mastercard card, the token is requested for you. No extra step at checkout.

Nothing new to integrate

Keep charging saved cards through the same API. The vault decides when to send the token instead of the number.

Card number vs network token

The same saved card, charged two ways.

A network token replaces the card number with a credential the card network manages for you.

The bank reissues the card
Card number: The saved number stops working. The next renewal is declined.
Network token: The network keeps the token pointed at the new card. Nothing to update.
The issuer decides
Card number: A bare card number, with nothing to show who stored it.
Network token: A token bound to your business, with a cryptogram the issuer can verify.
Data leaks somewhere
Card number: A stolen number can be used anywhere until the card is cancelled.
Network token: A stolen token only works for you, and never without a fresh cryptogram.
You switch processors
Card number: Depends on whether your old processor lets the cards go.
Network token: The token is held in your vault and charged on any processor you route to.

How it works

From a saved card to a tokenised payment.

01

Save the card

The customer saves a card in the Orchestrapay payment form. It is vaulted, and a network token is requested from Visa or Mastercard.

02

Charge the token

On the next payment the vault sends the network token with a fresh cryptogram to the processor your routing picked.

03

Stay current

When the bank reissues the card, the network moves the token to the new one. Renewals carry on without the customer.

Works with

Questions teams ask before they switch.

A network token is a replacement for the card number, issued by the card network itself (Visa Token Service or Mastercard MDES). It is tied to your business and used with a one-time cryptogram on each payment.

Switch your saved cards to network tokens.

Tell us how many cards you store and where you process them. We will show you how tokens are provisioned on your existing cards and what it costs.

  • Visa and Mastercard tokens in one vault
  • No change to how you charge saved cards
  • A transparent number before you sign anything

By submitting you agree to be contacted about Orchestrapay. We never share your details.