What a card carries.
WHAT THE NUMBER CONTAINS
An identifier for the issuing institution at the start An account identifier A check digit
WHAT THE LEADING DIGITS INDICATE
The scheme and the issuer, which determines routing and cost.
WHAT THE CHECK DIGIT PROVIDES
Detection of typing errors, using a simple algorithm.
WHAT IT DOES NOT PROVIDE
Any indication the card exists or has funds.
WHAT THE EXPIRY DATE IS FOR
Limiting the card's validity, and forcing reissue.
WHAT THE SECURITY CODE IS FOR
Demonstrating physical possession, for transactions where the card is not present.
WHAT MUST NEVER BE STORED
The security code, after authorisation The full magnetic stripe or chip data
WHY THE SECURITY CODE SPECIFICALLY
Scheme rules prohibit it absolutely, and storing it is a serious violation.
WHAT A TOKEN IS
A substitute value representing the card, usable only by the party it was issued to.
WHY TOKENISATION MATTERS
It removes card data from your systems while retaining the ability to charge again.
WHAT NETWORK TOKENS ADD
Tokens issued by the scheme, updated automatically when a card is reissued.
WHY THAT MATTERS COMMERCIALLY
Recurring payments survive card replacement, which otherwise causes churn.