How Visa Token Service works
A token requestor, an entity registered with a token service provider to request payment tokens, sends VTS a card number. The issuer decides whether to provision, and VTS returns a token in place of the number and keeps the link between the two.
In a payment the token travels in place of the card number, and Visa maps it back so that the issuer can authorise against the account. When the card is reissued, the token can stay while the number behind it changes.
What the Visa rules ask of an issuer
Under the Visa Core Rules of 18 April 2026 (4.1.15.1), an issuer that uses VTS assumes full responsibility for:
- Validating the cardholder's identity
- Provisioning and maintenance decisions for tokens
- Compliance with terms and conditions
- Credential updates for tokens and the accounts behind them
Visa Token Service in the Europe Region
In the same rule's table for the Europe Region, an issuer ensures that a token reflects the most up-to-date account number and expiry date. An active issuer participant also enables all its BINs in VTS for card-absent payments and maintains a monthly token provisioning approval rate of at least 90% per BIN.
A card programme under a BIN sponsor reaches VTS through its issuer and processor. Merchants and gateways connect from the other side, as token requestors, directly or through a provider.
Visa Token Service, MDES or a phone wallet?
- MDES
- The Mastercard Digital Enablement Service, Mastercard's counterpart for Mastercard cards.
- Phone wallet
- A wallet such as Apple Pay or Google Pay is a token requestor: it asks for a token and keeps it on the device. VTS is the service behind the wallet, not the wallet.
Where Visa Token Service shows up in a platform
Modules that do the work
- Card issuingVirtual and physical cards, wallets and controls, on the issuer processor you choose.
- Card acquiringCard acceptance on the phone, in store and online, through the acquirer you choose.
- CheckoutA hosted checkout for cards, wallets, bank payments and crypto, routed to the best provider.
Platforms that need it
Guides that go deeper
Where it is written
The laws and standards this page's facts come from.
- Visa, Visa Token Service
- Visa Core Rules and Visa Product and Service Rules, 18 April 2026: 4.1.15.1 and the glossary, Token and Token Requestor (Visa)
General information, not legal advice: what applies to you depends on your services and your market.