Banking Exchange Magazine Logo

Tokenization standard in the works

Global body to issue specifications to combat CNP fraud

Tokenization standard in the works

In an effort to address the need to combat card-not-present (CNP) fraud, especially as the payments system increasingly adopts the EMV chip-and-PIN system, the global technical body EMVCo announced it is developing a universal standard for tokenization.

Tokenization is the process of replacing a traditional card account number with a unique payment token that is restricted in how it can be used with a specific device, merchant, transaction type, or channel. When using tokenization, merchants and digital wallet operators do not need to store card account numbers.

EMVCo, collectively owned by American Express, Discover, JCB, MasterCard, UnionPay, and Visa, seeks to increase its focus from chip-based payments to include tokenization.

“Payment tokens also include enhanced data fields to provide richer information about the transaction, helping to improve transaction efficiency and provide more information about the circumstances under which the transaction was initiated,” said Christina Hulka, EMVCo Board of Managers Chair, in response to questions from Banking Exchange. “This advances the consumer and merchant payment experience and is one approach to preventing and containing fraudulent card account use.”

It’s a generally accepted fact that as countries have adopted EMV, card-present fraud declines but CNP fraud—typically involving online purchases—increases. The Payments Council of the Smart Card Alliance tracked CNP fraud in the United Kingdom and found it increased from about 55% of all credit fraud in 2007, to about 65% in 2012. Similarly, in France, the CNP fraud went up from about 52% in 2007, to about 73% in 2011.

EMVCo seeks to address this situation by coming up with a standard for tokenization that could be used universally.

“Existing payment tokenization systems are proprietary in nature and are not interoperable. This is why specifications are needed,” Hulka said. “A global specification to address tokenization will provide all stakeholders with a consistent, secure, reliable, and interoperable environment for digital payments. For consumers, enhanced security can lead to improved confidence in conducting digital payments. For merchants, this will enable them to confidently launch new technologies, knowing that they are building on a common framework that will be scalable to future industry requirements.”

The organization has appointed a task force of representatives from each member-owner of EMVCo, which will define the scope and action plan for the tokenization specification within the payments community. It expects to publish a first draft of the specification some time this year. It will engage with EMVCo associates when sufficient progress has been made, Hulka said.

“It is important to note that payment tokenization is not expected to unilaterally eradicate fraud, but offer a tool which can be deployed as part of a layered security approach by merchants and acquirers to minimize and contain card-not-present attacks. By increasing the defensive measures against malicious, unauthorized use of card account numbers, the payments industry is continuing to accelerate its vigilance against fraudsters.”

John Ginovsky

John Ginovsky is a contributing editor of Banking Exchange and editor of the publication’s Tech Exchange e-newsletter. For more than two decades he’s written about the commercial banking industry, specializing in its technological side and how it relates to the actual business of banking. In addition to his weekly blogs—"Making Sense of It All"—he contributes fresh, original stories to each Tech Exchange issue based on personal interviews or exclusive contributed pieces. He previously was senior editor for Community Banker magazine (which merged into ABA Banking Journal) and for ABA Banking Journal and was managing editor and staff reporter for ABA’s Bankers News. Email him at [email protected]

back to top


About Us

Connect With Us


Webinar: Card Based Faster Payments in Today’s Digital Economy

Time/Date: June 28, 2022, at 2:00 ET

Consumers and businesses want instant gratification and the ability to move money in just minutes. From payroll to P2P to insurance benefits, demand is rising for instant disbursement. However, there are pain points in the current money movement ecosystem, and to address them, financial institutions need a payments strategy that addresses the dramatic rise in faster payments.

In this Banking Exchange hosted webinar on June 28, 2022, at 2:00 ET, Jaspreet Singh, Head of A2A/P2P Commercialization, Visa Direct at Visa Direct, and Al Griffin, Product Manager at Alacriti, discuss:


This webinar is brought to you by:
Alacriti logo