Mastercard’s network token roadmap for Europe aims to retire the use of PAN tokenization for ecommerce transactions by April 1, 2030.
As part of the roadmap, Mastercard has set key deadlines for acquirers and merchants to switch to network tokens.
Key dates under the roadmap
-
October 1, 2026: Merchants must use network tokens for all Mastercard Credential On File (COF) transactions*. This will apply to any transactions where you store the cardholder’s details using our Vault.
-
April 2028: Merchants must use network tokens for all Mastercard guest transactions*. This will apply to all Mastercard transactions, regardless of whether you store the cardholder’s details.
- April 2030: Mastercard will require network tokenization for all ecommerce transactions in Europe**.
Mastercard has not announced any plans to decline PAN transactions following these deadlines. We’ll let you know if Mastercard announces further mandates to incentivize network token adoption.
* Excludes scenarios where the issuer declines the Network Token transaction, there is no active token available, or an attempt to tokenize failed. Transactions made with cards issued in Armenia, Azerbaijan, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Turkey, Turkmenistan, Ukraine, and Uzbekistan are excluded from this mandate.
** Excludes transactions made with cards issued in Armenia, Azerbaijan, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Turkey, Turkmenistan, Ukraine, and Uzbekistan
What are network tokens?
Network tokens are unique digital identifiers used to provide symbolic placeholder data across the payment flow, instead of the primary account number (PAN). Using network tokens:
- Reduces declines due to expired or replaced cards because the card schemes automatically update the underlying card details
- Reduces customer friction because the underlying card details are updated by the card schemes without any action by the customer
- Provides an additional security layer and reduces the risk of fraud because sensitive card details are only ever exposed to the card scheme and issuer
View network tokens documentation
What actions do merchants need to take?
- If you already use network tokens for your COF transactions, you don’t need to take any action
- If you don’t currently use network tokens, speak to your Account Manager or contact support to discuss enablement for your account