Types of Tokens

These tokens comprise the types of
TMS
tokens:
  • Customer Token
    : Contains customer's email address, customer ID, shipping address (stored in a token), and other related data.
  • Shipping Address Token
    : Contains the shipping address associated with a customer token.
  • Payment Instrument Token
    : Contains the complete billing details for the payment type including cardholder name, expiration date, and billing address.
  • Instrument Identifier Token
    : Contains the tokenized primary account number (PAN) for card payments as well as the associated network token or U.S. or Canadian bank account number and routing number.
  • Network Token
    : Network tokens pass through an acquirer and are de-tokenized by the payment network or issuer. For customer-initiated transactions, they require a cryptogram. Network tokens are mapped to instrument identifier tokens.

Figure:

TMS
Token Types

Customer Tokens

The customer token contains data about the merchant's customer including email address, customer ID, shipping address (stored in a token), and other related fields.

Shipping Address Tokens

The shipping address token contains the shipping address information associated with a customer token. This token includes any shipping address details, including the recipient's first and last name, company, shipping address, email, and phone number. A customer can have one or more shipping addresses, with one allocated as the customer's default shipping address.

Payment Instrument Tokens

The payment instrument token contains the complete billing details for the payment type including cardholder name, expiration date, and billing address. These are standalone payment instruments that cannot be associated with a customer.

Instrument Identifier Tokens

Instrument identifier tokens represent tokenized payment account numbers. This includes primary account number (PAN) for card payments, or U.S. or Canadian bank account number and routing number for an ACH bank account. An instrument identifier token can exist independently or it can be associated with a payment instrument.
An instrument identifier token can also contain an associated network token.
Instrument identifier tokens are associated with in these features:
Card Art
Display card art is provided by
TMS
to help your customers identify a card to select. See Card Art.
Enrollable Network Tokens
TMS
can enroll certain
network tokens
in an instrument identifier token to be used for future payments. Future payments require only the instrument identifier token for the payment information. The types of network tokens you can enroll into an instrument identifier are tokens used for in-app payment methods such as:
  • Android Pay
  • Apple Pay
  • Chase Pay
  • Google Pay
  • Samsung Pay
  • Visa Click to Pay
See Create an Instrument Identifier for Enrollable Network Tokens.

Network Tokens

When a
TMS
token is used in a transaction, the
TMS
token is de-tokenized, and the PAN is sent to the issuer for authorization. The PAN is still exchanged as the transaction is processed. With network tokens, the PAN is removed from the transaction processing and replaced with network tokens, making the transaction more secure.
The network scheme generates network tokens. A token replaces customer card information for secure transactions. Network tokens are mapped to instrument identifier tokens. The minimum card data required in order to request a network token is the PAN and the expiration date.
Using a network token has benefits:
  • Improved authorization rates for credential-on-file (COF) and recurring payments.
  • Real-time card information updates with life-cycle management. See Network Token Life-Cycle Management for more information on network token life-cycle management. When the customer's card details change, you can receive the updated information automatically. See Manage Webhook Subscriptions for more information on managing webhooks.
  • Improved customer tracking through the payment account reference (PAR), which is a consumer identifier that is less sensitive than the PAN. The PAR can be exchanged as the transaction is processed.
Network tokens can be provided for
merchants and
partners.
IMPORTANT
American Express does not support the Payfac model for processing network tokens. Contact your American Express representative for more information.