What is card tokenization?
Your card number is now a secret from the shops you buy from.
Every shop holds a different meaningless substitute. Steal one and it is worth nothing anywhere else.
Why your card number was the weak link
For decades, saving a card for later meant a merchant storing the actual sixteen digits. Multiply that across every subscription, food delivery app, and online shop you have ever used, and your card number sits in dozens of databases you have never thought about, each one a target.
The economics of that were terrible. One breach at one careless merchant compromised cards used everywhere.
What a token actually is
When you save a card, the card network or an approved provider issues a substitute number, tied specifically to that one merchant and often that one device. The merchant stores the token. When you buy something, the token travels, and only the network can translate it back to your real card.
The crucial property: the token is worthless outside its original context. Stolen from a food delivery app, it cannot be used at an electronics shop. It is a key cut for exactly one lock.
Why India forced the issue
In 2022 the Reserve Bank of India made this mandatory: merchants and payment aggregators were barred from storing actual card data, and the industry migrated to tokens across billions of saved cards. It was a genuinely painful migration and it made Indian card data materially safer than in markets where storing card numbers remains routine.
Most countries are moving the same way, more slowly, driven by the networks rather than by regulators.
Handing a valet your entire keyring means trusting them with your front door, your office and your car. Handing them a key that starts the car, does nothing else, and stops working at midnight requires trusting them with almost nothing. Same convenience. Completely different exposure.
Where you meet it
Every time an app asks you to re-add a card you had already saved. Every "card ending 4242" you see stored. And in the fact that a breach at a merchant you use no longer means cancelling your card.