Network Token

A network token is a surrogate credential issued by Visa or Mastercard against an underlying card account. When a merchant stores a customer’s card via a PSP that uses network tokenisation, the stored value is a network-issued token rather than a PAN or a PSP-specific vault ID.

Why Network Tokens Matter

Portability. PSP-proprietary tokens (e.g., Stripe’s pm_xxxxx or Braintree’s vault IDs) are references to credentials held in that PSP’s system. If you migrate to a different PSP, those tokens are worthless — you must re-capture card details from every stored customer. Network tokens are issued by Visa/Mastercard against the account, not the PSP, so they can be transferred to a new PSP that also supports VTS/MDES.

Lifecycle management. When a cardholder receives a new physical card (expiry, lost/stolen replacement), a stored PAN becomes invalid. A network token issued against the account remains valid — the card network automatically updates the underlying PAN mapping. This eliminates “card expired” soft declines for recurring merchants.

Authorisation uplift. Network tokens carry additional context fields — merchant identity, device assurance level, transaction type — that PSP-stored PANs don’t. Issuers use this context to reduce false declines. Stripe’s published data shows ~2.5% average authorisation rate uplift from network tokenisation.

3DS frictionless rate. Transactions presented with network tokens have higher 3DS2 frictionless authentication rates because the additional context reduces issuer uncertainty.

VTS vs MDES

• Visa Token Service (VTS): Visa’s network tokenisation infrastructure. Tokens issued by VTS are valid for Visa cards globally.
• Mastercard Digital Enablement Service (MDES): Mastercard’s equivalent. Tokens issued by MDES apply to Mastercard cards.

Most major PSPs (Stripe, Adyen, Braintree) support both VTS and MDES. Not all enable network tokenisation by default — merchants should verify their PSP configuration and request network tokenisation if not active.

PSP Token vs Network Token

	PSP Token	Network Token
Issued by	PSP	Visa / Mastercard
Portable	No	Yes
Survives card reissue	No	Yes
Auth rate uplift	Baseline	+2–4%
Migration risk	High	Low