Obtaining Tokens

You must be token enabled and certified prior to using the feature. Please consult your Relationship Manager concerning the requirements and details of this process.

There are three ways for you to obtain tokens for account numbers. First, you can submit an existing card number/Direct Debit account information (account number and routing number) using a Register Token request. When Worldpay receives this transaction type, we generate a token and return it to you via a Register Token response (see Register Token Transactions). Although you can use this method to tokenize an account number at any time, it is most useful when initially tokenizing your customer database. Worldpay recommends that you collect all distinct credit card numbers in your database and submit the information in one or more large Batch files. When you receive the response file, parse the returned token information to your database, replacing the card numbers.

The second method involves submitting a supported transaction with the card information. If you are a tokenized merchant, Worldpay automatically converts the card number to a token and returns the token in the response message. Typically, you would use this method when taking and submitting a transaction during the normal course of business. When you receive the response, you store the token instead of the card information.

Once we convert a card number to a token for a particular merchant, subsequent submissions of the same card number return the same token.

The third method of obtaining a token applies only to merchants using the Worldpay eProtect feature. In this case, upon submission of an account number via the eProtect API, Worldpay issues a low value token called a Registration Id. You then submit the Registration Id in an Authorization or Sale transaction and receive the token in the response message.