Banking Exchange Magazine Logo

Tokenization standard in the works

Global body to issue specifications to combat CNP fraud

Tokenization standard in the works

In an effort to address the need to combat card-not-present (CNP) fraud, especially as the payments system increasingly adopts the EMV chip-and-PIN system, the global technical body EMVCo announced it is developing a universal standard for tokenization.

Tokenization is the process of replacing a traditional card account number with a unique payment token that is restricted in how it can be used with a specific device, merchant, transaction type, or channel. When using tokenization, merchants and digital wallet operators do not need to store card account numbers.

EMVCo, collectively owned by American Express, Discover, JCB, MasterCard, UnionPay, and Visa, seeks to increase its focus from chip-based payments to include tokenization.

“Payment tokens also include enhanced data fields to provide richer information about the transaction, helping to improve transaction efficiency and provide more information about the circumstances under which the transaction was initiated,” said Christina Hulka, EMVCo Board of Managers Chair, in response to questions from Banking Exchange. “This advances the consumer and merchant payment experience and is one approach to preventing and containing fraudulent card account use.”

It’s a generally accepted fact that as countries have adopted EMV, card-present fraud declines but CNP fraud—typically involving online purchases—increases. The Payments Council of the Smart Card Alliance tracked CNP fraud in the United Kingdom and found it increased from about 55% of all credit fraud in 2007, to about 65% in 2012. Similarly, in France, the CNP fraud went up from about 52% in 2007, to about 73% in 2011.

EMVCo seeks to address this situation by coming up with a standard for tokenization that could be used universally.

“Existing payment tokenization systems are proprietary in nature and are not interoperable. This is why specifications are needed,” Hulka said. “A global specification to address tokenization will provide all stakeholders with a consistent, secure, reliable, and interoperable environment for digital payments. For consumers, enhanced security can lead to improved confidence in conducting digital payments. For merchants, this will enable them to confidently launch new technologies, knowing that they are building on a common framework that will be scalable to future industry requirements.”

The organization has appointed a task force of representatives from each member-owner of EMVCo, which will define the scope and action plan for the tokenization specification within the payments community. It expects to publish a first draft of the specification some time this year. It will engage with EMVCo associates when sufficient progress has been made, Hulka said.

“It is important to note that payment tokenization is not expected to unilaterally eradicate fraud, but offer a tool which can be deployed as part of a layered security approach by merchants and acquirers to minimize and contain card-not-present attacks. By increasing the defensive measures against malicious, unauthorized use of card account numbers, the payments industry is continuing to accelerate its vigilance against fraudsters.”

John Ginovsky

John Ginovsky is a contributing editor of Banking Exchange and editor of the publication’s Tech Exchange e-newsletter. For more than two decades he’s written about the commercial banking industry, specializing in its technological side and how it relates to the actual business of banking. In addition to his weekly blogs—"Making Sense of It All"—he contributes fresh, original stories to each Tech Exchange issue based on personal interviews or exclusive contributed pieces. He previously was senior editor for Community Banker magazine (which merged into ABA Banking Journal) and for ABA Banking Journal and was managing editor and staff reporter for ABA’s Bankers News. Email him at [email protected]

back to top


About Us

Connect With Us


Webinar: Real-Time Payments in the U.S. Market

Time/Date: June 16, 2021 2:00 p.m. ET

The U.S. has come a long way in its journey to real-time payments, with TCH and Zelle in market and FedNow just around the corner. COVID-19 has accelerated that demand to move to real-time. Yet many financial institutions remain unconvinced of the need to move, with less than 3% of financial institutions signed up today.

In this Banking Exchange hosted webinar Celent’s Gareth Lodge, Senior Analyst, Global Payments, and Alacriti’s Mark Ranta, Payments Practice Lead, discuss the findings in the Celent research report, Real-Time Payments in the US Market: Speeding Up or Slowing Down? A Call to Arms.


This webinar is brought to you by:
Alacriti logo