Tokenization: From Security Layer to Checkout Platform
Tokenization began as a way to protect sensitive account information. Today, it is becoming the platform layer connecting credentials, wallets, checkout, and the customer experience.
Subscriber · Sign in to listen to the audio briefing
Audio briefings are available to subscribers. Sign in with the email you used to subscribe — we'll send a one-time code.
For whatever reason, I have not written much about tokenization here.
That is surprising because it was part of my work during the early years of my career—and today it is almost omnipresent.
Around 25 years ago, while working on prepaid cards at Citi, I remember Visa using proxy numbers so sensitive account information did not have to be exposed in the files exchanged between participants.
At approximately the same time, I was involved in some of the early EMV chip-card launches in Latin America and the Caribbean.
We did not describe those initiatives using today’s language of network tokens, digital wallets, credential provisioning, token requestors, or checkout orchestration.
But two foundational ideas were already taking shape.
The real account number did not need to be visible to every participant in the payment process.
And the credential presented during a transaction did not need to remain static.
Proxy numbers helped separate sensitive account information from the systems and files that needed to reference it.
EMV introduced dynamic transaction data and made the physical credential substantially harder to replicate.
Today, those ideas have converged into something much broader.
Tokenization is no longer only a security mechanism designed to hide a card number.
It is becoming a platform capability that determines how a credential is issued, provisioned into a wallet, recognized at checkout, authenticated across channels, and managed throughout its lifecycle.
So why am I writing about this today?
Because tokenization has moved from the back office to the customer experience.
Its impact can now be seen in ordinary moments:
A card can be available in a digital wallet before the physical card arrives.
A replacement card may not interrupt every subscription or stored-payment relationship.
A returning customer can complete a purchase without repeatedly entering the same card information.
A credential can operate across a merchant application, browser, digital wallet, connected device, and increasingly an AI-enabled purchasing experience.
The consumer sees convenience.
Behind that simplicity, the platform is managing credential provisioning, device and merchant controls, authentication, token assurance, account updates, routing, transaction data, and lifecycle events across multiple participants.
That is where tokenization becomes more than a security decision.
It becomes an orchestration decision.
For issuers, merchants, fintechs, processors, and payment platforms, tokenization increasingly influences:
- How quickly a customer can begin using a newly issued card
- Whether stored credentials survive a card replacement
- How consistently a payment credential works across channels
- How much friction is introduced during authentication
- Whether wallet and checkout experiences operate as connected journeys or separate integrations
- How easily new payment experiences can be launched without rebuilding the credential layer each time
Organizations that treat every wallet, merchant, or checkout integration as a separate project will continue to create fragmented experiences.
Organizations that treat tokenization as a reusable platform capability can support new channels while preserving the relationship between the customer, the credential, and the underlying account.
The best tokenization strategy may be almost invisible to the customer.
But its results are not.
The wallet works.
The subscription continues.
The replacement card updates.
The checkout takes seconds instead of minutes.
The payment goes through.
And while this will naturally resonate with payments professionals, I hope it also reaches people outside the industry—the people standing at the other end of the payments ecosystem.
The people in the payments corner that matters most.
The users.
They may never see a network token or understand the infrastructure operating behind one.
They should not have to.
Some of the most important innovations in payments are the ones consumers never notice.
They simply experience a payment journey that works.
We spent the last 25 years making payment credentials safer.
The next competitive advantage will come from making them easier to use.
Franco Di Pietro
The Payments Corner
30+ years across payments, fintech, banking, and financial infrastructure. Operator-level perspectives on the systems that move money.
Related Insights
Platform Transformation in Payments Isn't New. The Stakes Are.
We often talk about platform transformation in payments as if it were something entirely new. It isn't. What's changed isn't the existence of transformation — it's the realization that front-end innovation depends on what the processing architecture underneath can actually support safely and flexibly at scale.
Are Issuers Giving Up Too Much Control to Their Processors?
Lately, I've been thinking about program management in card issuing. And one question keeps surfacing — who actually controls the business? Whose logo is on the card? Who carries the credit risk? Execution can be delegated. Control cannot — at least, not without meaningful long-term trade-offs.
Why the ATM Still Matters in a Supposedly Cashless World
I've heard predictions about a fully cashless future more times than I can count — and year after year, the reality on the ground tells a more nuanced story. Cash still represents a material share of point-of-sale transactions globally. What's changed isn't the relevance of ATMs. It's how they're built and managed.
