Tokenize Cards for Apple Pay & Google Pay

Physical card issuance produces a plastic card with a printed PAN, expiry, and CVV that the cardholder carries and presents at the point of sale. Card tokenization replaces the real PAN with a device-specific token — a surrogate number — stored in Apple Wallet or Google Wallet. The token is transmitted at the NFC terminal instead of the real card number, so the merchant never sees the actual PAN. Tokenized cards are more secure than physical cards at the POS because each transaction generates a unique cryptogram that cannot be replayed, and a compromised token can be suspended without affecting the underlying card.

Push provisioning is the in-app flow where your platform adds a card directly to Apple Wallet or Google Wallet without the cardholder manually entering their card details. Fyatu's Token Provisioning API provides the card credentials and encrypted provisioning payload required by Apple and Google. Your mobile app calls the platform SDK, which presents a single confirmation sheet to the user — one tap from the user, and the card appears in their device wallet. Push provisioning dramatically increases wallet adoption rates compared to manual card-add flows, which require cardholders to photograph or type their card details.

Yes. A single Fyatu card can be tokenized across multiple devices — for example, an iPhone, an Apple Watch, and an Android phone belonging to the same cardholder, or across two devices belonging to business partners on a shared card program. Each device receives a unique token (DPAN) tied to that device, and each token is independently managed. You can query all active tokens for a given card via the Token Provisioning API, and suspending the underlying card automatically deactivates all associated device tokens.

Fyatu automatically manages token lifecycle in response to card state changes. When a card is cancelled via the Cards API, all associated wallet tokens are deactivated immediately — preventing further tap-to-pay transactions on that card across all provisioned devices. When a card is reissued (for example, on expiry or due to a compromised PAN), Fyatu can carry over wallet tokens to the new card number without requiring the cardholder to re-add the card to their wallet, preserving the tap-to-pay experience seamlessly. Token lifecycle events are delivered to your platform via webhook.

Samsung Pay support is available for Fyatu card programs on supported Samsung devices. Samsung Pay uses the same underlying card network tokenization infrastructure (MDES for Mastercard, VTS for Visa) as Apple Pay and Google Pay, so cards that are tokenization-eligible for one wallet are generally eligible for all three. Samsung Pay is particularly relevant in markets like South Korea, Southeast Asia, and parts of the Middle East where Samsung device market share is high.

Apple Pay and Google Pay eligibility is included by default for all cards issued through Fyatu — it is not a separate add-on or additional fee. The card network tokenization infrastructure (Visa Token Service and Mastercard Digital Enablement Service) is part of Fyatu's BIN programme membership. Push provisioning via the Token Provisioning API is available as part of the standard Fyatu API surface, and token lifecycle management is included at no additional per-token charge.