The Credential Became a TokenNarrow moat

When a card is loaded into a phone or stored by a merchant, what is saved is usually not the card number but a token — a substitute credential that Visa issues, maps and can revoke. It was introduced to reduce fraud, and it did. It also quietly changed who holds the relationship.

Tap-to-provision is now live across more than 1.4 billion Visa cards with over 600 participating issuers¹. A stored card number belonged to whoever stored it, and died when the card was reissued. A token belongs to the network and survives reissue, so the subscription does not lapse and the wallet does not break. That is genuinely convenient for the cardholder, genuinely valuable to the merchant, and it makes the credential materially harder to displace — because displacing it now means re-collecting card details from customers who have long forgotten they ever entered them. Tap to Pay provisioning is live across more than 1.4 billion Visa cards with over 600 participating issuers.

The strategic effect is that the thing being defended is no longer physical, which is a better position than it sounds. A network whose moat depended on plastic in a wallet would be eroding as commerce moves into apps, devices and, shortly, software agents. A network whose moat is a token in a vault it operates is arguably stronger after that move than before it, because the token is the part every one of those environments needs and none of them wants to build.

The catch is that tokenisation is a capability rather than a monopoly, and the parties who control where tokens are presented — the handset platforms and the largest wallets — are not Visa.