Payment tokenisation replaces sensitive card data with a unique token, created the first time a customer pays and reused for every payment after it. Returning customers pick their saved card and enter just their CVV, while the real card number stays in a hosted, secure vault rather than your systems.
24 hrs
approval, once documents are in
150+
currencies processed
4.4
Trustpilot rating
2010
processing payments since
On this page Choosing a provider · The integration · Going live · See it working · Once you are live · FAQs
Tokenisation quietly changes three things at once, what you store, what you have to prove and how fast a returning customer gets through checkout.
Check your approval oddsThe card number is captured once, stored in a hosted, secure token vault and never touches your servers again. Your systems hold only the token, a unique string that is useless to anyone who steals it, which is exactly the point.
Because sensitive card data is not stored or handled on your side, the evidence and time needed to align with PCI DSS shrinks considerably. Less scope to secure, less to audit and less that can go wrong in between.
Returning customers stop retyping sixteen digits on a phone keyboard. They pick their saved card, add the CVV and they are done, which is where repeat purchase conversion quietly improves month after month.
One token vault behind every channel you sell through, so security and convenience stop being a trade off.
The token is created when the first payment is taken and reused for every payment after it. The customer sees a saved card, your systems see a harmless string, and the vault holds the rest.
Returning customers choose their saved card from a menu and enter just the CVV to pay. New card details can always be added alongside, so nobody is ever boxed in.
Customers can save as many cards as they like against one profile, personal and business, and switch between them at checkout in a tap.
Tokens replace sensitive card data in the transaction flow, which cuts the exposure that fraud and the chargebacks it drags behind it feed on.
Tokenisation runs through the hosted payment form, Pay by Link, the virtual terminal, server to server API integrations and the shopping cart plugins, usually enabled with a single setting.
Saved cards pair naturally with recurring payments and subscriptions, so the same vault that speeds up checkout also keeps renewals collecting without a card form in sight.
Fair. So here is what UK merchants say after switching to eCom Pay, in their own words.
It was such a pleasure working with eCom Pay for my company, very straightforward to set up and the team were so helpful. No hidden fees, cost efficient, and from using other platforms before I can say this has been the best so far.
Verified merchantvia Trustpilot
We found eCom Pay to be a simple, efficient payment system to integrate, with a lot of support behind it. Would recommend them over competitors who charge far too much.
Verified merchantvia Trustpilot
Great customer service from eCom Pay. Needed a card reader for my business, they had me set up fast and gave me better rates than the last company. Highly recommend.
Verified merchantvia Trustpilot
Super impressed with eCom Pay. The transaction fees are competitive, and I love that my customers have multiple payment options, which has noticeably improved my sales.
Verified merchantvia Trustpilot
Good service from eCom Pay. The card machines are reliable and easy to use. I like that there are no hidden fees and everything is explained upfront.
Verified merchantvia Trustpilot
Would highly recommend. Easy, simple, and always answers when I need help. The best payment gateway I have come across, with a wide variety of packages available.
Verified merchantvia Trustpilot
The application is the start, not the product. This is what running your payments with eCom Pay actually looks like, week to week.
Available 24/7 by phone, WhatsApp or email. Enabling tokenisation, tuning how saved cards appear and rate reviews all go through one person who knows your account.
Already storing tokens with another gateway? A secure, managed import can move them across, so your returning customers keep their saved cards and never notice the switch.
The same vault powers subscriptions and recurring payments, so one setup covers fast checkout today and automated collection tomorrow.
Tokenisation shares its account with the gateway, Pay by Link, the virtual terminal and card machines. Switch on what you need as you grow.
Payment tokenisation replaces sensitive card data with a unique string of numbers and letters called a token. The token is created when a customer first pays and is reused for every later payment, while the real card number sits protected in a secure vault rather than in your systems.
Yes, that is its whole purpose. The real card number is stored in a hosted, secure token vault and never sits on your servers, so a breach of your systems exposes only tokens, which are useless to an attacker. It is one of the strongest practical protections a checkout can carry.
Considerably. Because your business no longer stores or handles sensitive card data, the scope of what you must secure, evidence and audit for PCI DSS alignment shrinks, which saves time, cost and risk every single year.
The first payment looks completely normal. From the next visit, the checkout offers their saved card from a menu, they enter just the CVV and the payment completes. Adding a new card stays available every time, so the choice is always theirs.
Yes. Multiple cards can be stored against the same customer, and the checkout presents them as a simple menu. Personal card for some orders, business card for others, all flowing through the same secure vault.
Usually, yes. Tokens can be imported through a secure, encrypted transfer process managed with your specialist, so returning customers keep their saved cards after you switch and your repeat revenue never skips a beat.
The hosted payment form, Pay by Link, the virtual terminal, server to server API integrations and the shopping cart plugins all support it. In most setups it is enabled with a single setting, and your account manager confirms the exact step for yours.
Ask for it when you apply, or request it later through your account manager. There is no setup fee to apply, your application is approved in 24 hours once your documents are in, and tokenisation switches on within your existing integration.
Written by the eCom Pay team. Reviewed August 2026. Last updated August 2026.
Approved in 24 hours once your documents are in, enabled within your existing integration, with the card data held safely in the vault instead of your systems.
Billing on repeat? See recurring payments, collect balances with Pay by Link, or explore all online payment solutions.