Secure Card on File

Allows merchants to protect consumer payment credentials to reduce fraud, improve approval rates and enhance user checkout experience by tokenizing their card details

Secure Card on File (SCOF) allows merchants, service providers and commerce platforms to tokenize Account PANs entered by consumers or existing Account PANs held on file, replacing each PAN with a unique token. These tokens can be used for e‑commerce and in-app transactions in the same way as Account PANs.

Target Audience

  • Commerce Platforms
  • Merchants
  • Payment Facilitators
  • Payment Service Providers
SCOF will manage the digitization process of the consumer’s PAN and send the digital credentials back to the merchant.
Key features

Secure e-commerce by replacing account PANs with tokens to ensure better approval rates, optimized user experiences, robust security features, and more.

Security

Customer payment information is secure as it passes between entities, increasing trust, building loyalty and reducing the likelihood of fraud

Convenience

Enhanced features simplify processes such as provisioning and card lifecycle management events, limiting frustrations associated with manual card entries

Control

Access to secure credentials across all touch points of the payment journey allows you to provide easier, faster checkouts in-app or at a contactless POS


Components that can be outsourced to Engage partners

Merchants who want to offer secure, simple and convenient checkout experience to their consumers through Secure Card on File need to connect their systems to SCOF using the SCOF APIs.

Merchants can connect to SCOF using a Mastercard Engage–qualified partner as described in this value chain of a Secure Card on File environment.

Enable SCoF

Merchants can connect to SCOF using a Mastercard Engage–qualified partner that will enable and run SCOF on their behalf.

MDES for Merchants (M4M)

Merchants that want to tokenize consumer credentials need to connect their systems to MDES using the MDES Digital Enablement APIs. MDES will manage the digitization process of the consumer’s PAN and send the digital credentials back to the merchant. Merchants can also connect to MDES using a Mastercard® Engage–qualified partner.