Which major card networks (Visa, Mastercard, Amex) have native tokenization or protection features partners must support?

Checked on November 27, 2025
Disclaimer: Factually can make mistakes. Please verify important information or breaking news. Learn more.

Executive summary

Network tokenization — where card networks issue a “token” that replaces a PAN — is now a native offering from all three major U.S. card brands: Visa (Visa Token Service/VTS), Mastercard (MDES / Secure Card on File) and American Express (American Express Token Service/AETS), and merchants are being pushed to support these network tokens to get higher approval rates and lower fraud (e.g., Visa, Mastercard, AmEx token services exist and are promoted) [1] [2]. Reporting from 2024–2025 shows Visa and Mastercard actively pushing broader adoption and tying fee and product strategies to token use; American Express likewise operates its token service though most headlines focus on Visa and Mastercard’s pushes [3] [4] [1].

1. What “native tokenization” means in practice: networks issue tokens, not just gateways

Card networks operate their own Token Service Providers (TSPs) and issue network tokens that substitute a card’s PAN across wallets, card-on-file systems and contactless flows — Visa with Visa Token Service (VTS), Mastercard with MDES (now framed as Secure Card on File or similar), and American Express with the American Express Token Service — and merchants can integrate directly with those network token services or use intermediaries that support them [1] [5]. Payments coverage frames network tokens as distinct from merchant- or gateway-generated tokens because the card brand controls provisioning, lifecycle and routing benefits [1] [5].

2. Why networks want merchants and platforms to support tokens

Visa and Mastercard have publicly tied better authorization rates, lower fraud and smoother customer experiences to tokenized transactions: Visa materials and analysts cite multi-percentage-point uplift in approvals and large fraud reductions, and Mastercard reports rising token shares in regions like Europe [3] [4] [2]. Industry reporting notes tokenized transactions are projected to expand rapidly over the decade, and Visa/Mastercard are setting timelines (e.g., near-universal adoption goals by 2030 noted in sector writing) that create commercial pressure for merchants and PSPs to support network tokens [6] [4].

3. Differences in emphasis among Visa, Mastercard and AmEx

Visa and Mastercard dominate the public conversation about pushing token adoption — with programs like Visa’s “secure remote commerce”/Flexible Credential and Mastercard’s Click to Pay / Agent Pay initiatives explicitly built around tokenized credentials — while American Express maintains its own token service but receives less headline attention in the cited reporting [3] [2] [7] [1]. All three, however, are identified as operating native token services that can be integrated by issuers, merchants and platforms [1] [4].

4. Merchant implications: integration, fees and operational choices

Merchants seeking to maximize approvals and reduce fraud are being encouraged — and in some cases commercially nudged — to adopt network tokenization. Commentary notes fee and product changes tied to non-tokenized flows (e.g., Visa’s incentives and fee differentiation for Secure Credential Framework adoption mentioned in sector blog coverage) and suggests merchants should evaluate direct integration with network TSPs, gateway partners that support network tokens, or wallet integrations [1] [6]. Specifics of fee changes and timelines are mentioned in industry blogs and vendor write-ups, so merchants should confirm current timelines with their acquirers and networks [1].

5. Technical and business trade-offs: control, uptime, and token lifecycle

Using a network token shifts some control (provisioning, refresh, routing) to the card brand and issuer, which can improve lifecycle management (automatic re-provisioning when cards expire, etc.) and reduce merchant PCI scope but also creates dependency on the network’s token lifecycle and directory services; that trade-off is central to the networks’ messaging about seamless consumer experience and fraud reduction [2] [5]. Vendors and consultancies emphasize planning for token mapping, vaulting strategies and third‑party integration nuances when adopting network tokens [5] [8].

6. Where reporting is thin or silent

Available sources do not mention granular implementation requirements for every merchant type (e.g., exact API calls, certification steps per network) or exhaustive comparative SLA/uptime commitments among VTS, MDES and AETS beyond high-level product descriptions (not found in current reporting) [1] [2]. Similarly, while several pieces reference fee incentives or changes, detailed, current fee schedules and contractual mechanics for non-compliance with token mandates are not exhaustively reported in these items and should be verified directly with networks or acquirers [1].

7. Bottom line for decision-makers

All three major card networks offer native token services that merchants and platforms can and increasingly must support to capture higher approval rates and lower fraud: Visa (VTS), Mastercard (MDES/Secure Card on File) and American Express (AETS) [1] [2]. Given network pushes, merchant teams should inventory current card-on-file and wallet integrations, ask acquirers/gateways about network-token support and timelines, and budget for integration or partner upgrades — while validating any fee or compliance deadlines directly with the networks or their acquiring partners [1] [3].

Want to dive deeper?
Which card network tokenization standards must online merchants implement for card-on-file security?
How do Visa, Mastercard, and American Express differ in their network token service offerings and APIs?
What certifications or SDKs do payment providers need to use Visa or Mastercard native tokenization?
Do small businesses have to support network tokens for in-person EMV/contactless transactions?
How do network tokens interact with PCI DSS and merchant liability protections?