Overview
Customer Token Vault is an upgrade to the Customer Vault feature. It replaces sensitive cardholder data with secure, network-issued tokens generated by card networks like Visa and Mastercard. These tokens provide an extra layer of security, are automatically updated by the card brands, and reduce the risk of failed payments and chargebacks.
Customer Token Vault is ideal for merchants who store cards for recurring billing, subscriptions, or card-on-file payments.
What Are Network Tokens?
Network tokens are digital replacements for actual credit card numbers. They are:
- Issued directly by Visa and Mastercard
- Tied to your business (merchant domain-specific)
- Evergreen (they stay valid even if the card is reissued or expired)
Behind the scenes:
- The first transaction using a credit card triggers a tokenization request.
- The network responds with a token that replaces the original card number for future transactions.
- Each transaction also includes a cryptogram (a unique security key) to verify its authenticity.
Benefits of Customer Token Vault
- Increased Approval Rates: Card brands report 1%–4% improvement in approvals when using network tokens.
- Stronger Security: Tokens reduce the risk of card data breaches.
- Lower Declines: Tokens are automatically updated if a card is reissued.
- Fewer Chargebacks: Works well with EMV 3DS and fraud tools to shift liability.
- Reduced Costs: Potentially lower interchange fees from card brands.
- Evergreen Tokens: No need to manually update card data after reissues.
Prerequisites
Before using Customer Token Vault, make sure your account is configured with a supported credit card processor. Network tokenization only works with select processors.
To verify this:
- Log in to your Merchant Portal
- Navigate to your processor settings
- Confirm that your selected processor supports network tokens
If your current processor is not supported, you may need to switch to one that is before enabling the service.
Common Questions
What is Customer Token Vault?
It’s a secure upgrade to Customer Vault that replaces card numbers with network-issued tokens.
How are network tokens different from stored card data?
Tokens are issued by the card brands and automatically updated. They offer better security and continuity than traditional stored cards.
Are debit cards supported?
No, only credit cards are eligible for tokenization at this time.
Will I still need Automatic Card Updater (ACU)?
Yes. Some regions, card types, or processors don’t yet support tokenization. ACU ensures updates where tokenization isn’t available.
What happens to my old Vault IDs?
When used in a transaction, they are automatically converted to network tokens.
Why do I see both Customer Vault and Customer Token Vault on my invoice?
You may be billed for both services in your first billing cycle if you had activity under Customer Vault before upgrading.
Can tokens be used across processors?
Yes, as long as the processors support network tokens within your account.
Can tokens be used on other platforms or gateways?
No. Network tokens are specific to your account and cannot be transferred.
Need Help?
If you have questions or need assistance activating or configuring Automatic Card Updater, please contact your Merchant Service Provider.