The tipping point already happened
Tokenized credentials now represent nearly 60% of global eCommerce transactions. That's not a projection. It's the current state. Visa reports that tokenization drove $110 billion in incremental merchant sales in 2024, and 72% of merchants surveyed by the Merchant Risk Council say they already use some form of payment tokenization.
The shift happened faster than most merchants noticed, because tokenization works in the background. No new checkout flow. No extra step for the customer. The card number simply never travels in the clear.
What network tokenization actually does
When a customer saves their card with a merchant, the card network (Visa, Mastercard) replaces the actual card number with a token, a unique string locked to that specific merchant, channel and device. The token looks like a card number, routes like a card number, but is useless if stolen because it only works in the exact context it was created for.
When the real card expires or gets reissued, the network updates the token automatically. The merchant doesn't need to ask the customer to re-enter their details. The subscription doesn't break. The saved card just keeps working.
This is different from older merchant level tokenization, where the merchant or their payment gateway stored a reference to the card. Network tokens are issued and managed by the card schemes themselves, which means the issuing bank sees the token, recognizes the merchant and can make a smarter authorization decision.
Why authorization rates go up
Issuers approve tokenized transactions at higher rates for 3 reasons. First, the token proves the card is being used at the merchant where it was registered, which reduces fraud risk. Second, the credentials stay current even after a card replacement, eliminating declines from expired or reissued cards. Third, the issuer gets richer data about the merchant and the transaction context, which helps their fraud models make better calls.
The difference isn't trivial. Merchants switching from raw card numbers to network tokens routinely see authorization rate improvements of 2 to 6 percentage points. On a high volume eCommerce operation, that translates directly into recovered revenue.
The 40% problem
If 60% of eCommerce transactions are tokenized, 40% still run on raw card numbers, stored in merchant vaults, passed through redirects, typed in manually. Those transactions carry higher fraud rates, higher decline rates and higher PCI compliance costs. They also represent the transactions most likely to break when a card is reissued.
The pressure on that 40% is increasing. Card networks are raising interchange incentives for tokenized transactions and adding friction for non tokenized ones. Issuers are tightening their fraud models, which means raw card numbers trigger more step up authentication. And regulations in several markets are moving toward mandating tokenization for stored credentials.
The direction is clear. Tokenization is becoming the baseline, not the upgrade.
Where CX Pay fits
CX Pay's hosted payment page and Click to Pay integration both use network tokenization. Merchants processing through our platform get the authorization rate benefits and credential lifecycle management without needing to build or manage token infrastructure themselves. It works across the 70+ local payment methods and 15+ currencies we support.