Network Tokens

Network tokens are widely used payment instruments that add an extra layer of security by replacing the card number with a token that is used during the transaction instead of the card number. Cards Connect supports network tokens both for customer initiated and merchant initiated transactions.

A network token looks just like a card number, its BIN can be resolved back to the card issuer, has an expiration date, and passes the Luhn validation.

Cards Connect expects the cardType to be set as NetworkToken, which allows you to set the cardNumber and expirationDate with the token number and expiration date respectively. If you are requesting a customer initiated transaction, most issuers expect you to provide a cryptogram that verifies the network token, which can be provided under the tokenCryptogram property. You may also set an optional Token Requestor Id if you have one. You may also set the CVV of the actual card during a network token transaction as an additional security measure.

{
  "reconciliationId": "e8dd3707-0d8f-4dde-8691-dec639ba6f5e",
  "orderId": "Test0000001",
  "amount": 250,
  "currency": "AUD",
  "paymentSource": "ECommerce",
  "statementDescriptor": {
    "name": "Test Merchant Pty Ltd",
    "description": "Drinks - Latte(Lrg)",
    "url": "https://www.example.com",
    "phoneNumber": "02xxxxxxxx",
    "city": "Surry Hills"
  },
  "cardDetails": {
    "cardType": "NetworkToken",
    "cardNumber": "535318XXXXXX6466",
    "expirationDate": "09/30",
    "tokenCryptogram": "AC6DV4Ihc5S8AAEAAABWAoADFA=="
  },
  "externalBuyerId": "Test Buyer",
  "billingDetails": {
    "firstName": "John",
    "lastName": "Example",
    "emailAddress": "[email protected]",
    "phoneNumber": "04xxxxxxxx",
    "addressLine1": "1 Woolworths Way",
    "addressLine2": null,
    "city": "Sydney",
    "suburb": "Bella Vista",
    "state": "NSW",
    "postCode": "2153",
    "country": "Australia"
  },
  "merchantInitiated": false,
  "isSubsequentTransaction": false
}

Note that we expect the cardDetails object to be encrypted. The above representation is for illustration purposes only.