Tokenization

Tokenisation replaces sensitive payment details with a substitute value, a token. A store can reference a payment method without using the original card number throughout its systems, while the processor retains the underlying data in that arrangement.[1] This differs from simply encrypting the same number.

A token can support repeat payments, but possessing it is not unrestricted permission to collect arbitrary amounts. Limit access and usage to the intended context. Do not confuse payment-method, customer and transaction identifiers. Reduced card-data exposure still requires careful access control and valid payment arrangements.