Skip to content
SPECIFICTION
Get listed

American Express Token Service

network.americanexpress.com

Free plan WebiOSAndroidAPI
Visit network.americanexpress.com
Spec score 9.0 #2 of 22 in Payment Tokenization Software

What it is

American Express Token Service replaces a card’s primary account number with a payment token for online and mobile commerce. It includes a token vault, token issuance and provisioning, lifecycle management, and risk management. Tokens are surrogate values that can be restricted by retailer, number of uses, lifetime, and other variables, and follow EMVCo Payment Tokenization specifications. During provisioning, issuers can assess whether a card is active, suspected of fraud, eligible for tokenization, and belongs to the card member requesting the token. Lifecycle management can keep tokens current when cards are replaced, reducing manual updates to stored payment details. Listed uses include card-on-file payments, Click to Pay, digital wallets, virtual cards, browser autofill virtual card numbers, and digital or numberless cards. The service is cloud-based and supports payment cards, card-on-file credentials, digital wallets, wearables, Click to Pay, and QR code payments. Pricing is on request; the listed plan is free, with no deployment or use fees stated. Availability varies by market and enablement is required.

Spec sheet

What it does
Replaces a card primary account number with a surrogate payment token for online and mobile transactions.Read 15 Oct 2026 · network.americanexpress.com
API
The FAQ identifies a Token Service Cryptogram API as the channel for eCommerce Cryptogram, which supports dynamic cryptographic authentication for e-commerce and card-on-file tokenization.Read 2 Oct 2026 · network.americanexpress.com
Integrations
The issuer overview lists Apple Pay, Google Pay, Samsung Pay, Card-on-File Tokenization, and Click to Pay as supported by its lifecycle management application.Read 2 Oct 2026 · network.americanexpress.com
Security
Payment tokens are unique surrogate values that can be restricted by retailer, number of uses, lifetime, and other variables, and follow EMVCo Payment Tokenization specifications.Read 2 Oct 2026 · network.americanexpress.com
Support
The FAQ provides production support phone numbers and dedicated email contacts for network participants, merchants, processors, API production issues, and token requestor ID requests.Read 2 Oct 2026 · network.americanexpress.com
API integration
American Express says enabling AETS and its supporting services is done through API integration.Read 15 Oct 2026 · network.americanexpress.com
Availability and onboarding
Market availability is provided through an American Express relationship manager; issuers and merchants contact their American Express representative or relationship manager to discuss enablement.Read 2 Oct 2026 · network.americanexpress.com
Browser autofill
Virtual Card Number for Browser Autofill creates a tokenized number that fills payment credentials and can use a cryptogram instead of manual security-code entry.Read 15 Oct 2026 · network.americanexpress.com
Card-on-file
Card-on-file tokenization covers stored credentials for future purchases, recurring billing and subscriptions.Read 15 Oct 2026 · network.americanexpress.com
Card-on-file scope
Card-on-File Tokenization focuses on online and e-commerce stored-credential transactions, including recurring payments and subscriptions.Read 2 Oct 2026 · network.americanexpress.com
Certification limit
Network authorization certification is required to support digital wallet and Card-on-File Tokenization transactions.Read 2 Oct 2026 · network.americanexpress.com
Certification requirement
Network authorization certification is required for card-on-file and digital-wallet transactions.Read 15 Oct 2026 · network.americanexpress.com
Click to Pay
Click to Pay uses tokens linked to enrolled card credentials across websites, apps and other digital channels.Read 15 Oct 2026 · network.americanexpress.com
Company headquarters
LinkedIn lists American Express headquarters in New York, New York.Read 15 Oct 2026 · linkedin.com
Company size
LinkedIn lists American Express as having more than 10,001 employees.Read 15 Oct 2026 · linkedin.com
Company type
LinkedIn identifies American Express as a public company in financial services.Read 15 Oct 2026 · linkedin.com
Current status check
StatusGator reported American Express operational on October 15, 2026 while showing recent user reports involving login and payment access.Read 15 Oct 2026 · statusgator.com
Digital wallets
Digital-wallet implementations store payment tokens instead of card data for in-app and point-of-sale payments.Read 15 Oct 2026 · network.americanexpress.com
Documentation access
The implementation guide is accessed through Amex Enabled registration and dashboard access.Read 15 Oct 2026 · network.americanexpress.com
Fraud reduction
Domain controls can restrict payment tokens to a particular merchant, helping limit unauthorized use after a breach.Read 15 Oct 2026 · network.americanexpress.com
Included services
The service includes a token vault, token issuance and provisioning, lifecycle management, and risk management capabilities.Read 2 Oct 2026 · network.americanexpress.com
Lifecycle management
Lifecycle management automatically keeps payment credentials current when cards are replaced.Read 15 Oct 2026 · network.americanexpress.com
Limit: Android app eligibility
The Amex Android app listing says its features are limited to eligible U.S. American Express card accounts and exclude prepaid cards and cards issued by other issuers.Read 15 Oct 2026 · play.google.com
Limit: customer-service complaints
Trustpilot's review summary says recurring complaints concern scripted or unhelpful support, payment problems, delayed transactions and unexpected fees.Read 15 Oct 2026 · trustpilot.com
Limit: observed service incident
StatusGator recorded a 52-minute incident on February 9, 2026 in which account balances and transactions were not displaying or processing, with no official acknowledgement shown.Read 15 Oct 2026 · statusgator.com
Merchant benefit
The product page says storing tokens instead of card credentials can reduce merchants’ PCI-compliant infrastructure needs and PCI audit requirements.Read 2 Oct 2026 · network.americanexpress.com
Notable news: headquarters plan
An SEC filing says American Express announced on February 25, 2026 plans for an approximately 1.95-million-square-foot headquarters at 200 Greenwich Street in New York, targeted for completion in 2031.Read 15 Oct 2026 · sec.gov
Onboarding
Issuers, merchants, acquirers and service providers are directed to contact an American Express representative for enablement.Read 15 Oct 2026 · network.americanexpress.com
Payment Account Reference
AETS generates a 29-character non-financial Payment Account Reference that maps a tokenized PAN to affiliated payment tokens.Read 15 Oct 2026 · network.americanexpress.com
Praise: customer support exceptions
Some Trustpilot reviewers describe polite or helpful representatives and prompt assistance during urgent travel situations.Read 15 Oct 2026 · trustpilot.com
Provider ecosystem
The Amex Enabled program lists more than 1,200 service providers, 17 product portfolios and more than 45 products.Read 15 Oct 2026 · network.americanexpress.com
Rating on Google Play
4.8 out of 5 from 103K reviews for the separate Amex Android account app.Read 15 Oct 2026 · play.google.com
Rating on Trustpilot
1.5 out of 5 from 5,474 reviews for American Express Global.Read 15 Oct 2026 · trustpilot.com
Risk assessment
Issuer risk assessment can check whether a card is active, not suspected of fraud, eligible and owned by the requesting member.Read 15 Oct 2026 · network.americanexpress.com
Standards alignment
American Express states that its token services align with EMVCo industry standards.Read 15 Oct 2026 · network.americanexpress.com
Token provisioning
It supports payment-token issuing and provisioning for American Express Network participants.Read 15 Oct 2026 · network.americanexpress.com
Token vault
The service includes a token vault for storing and managing payment tokens.Read 15 Oct 2026 · network.americanexpress.com
TRID API
The Token Requestor ID API provides self-service creation and updates for token requestor identifiers.Read 15 Oct 2026 · network.americanexpress.com
Use cases
Listed use cases include Card-on-File Tokenization, Click to Pay, digital wallets, virtual cards, virtual card numbers for browser autofill, and digital or numberless cards.Read 2 Oct 2026 · network.americanexpress.com
Virtual cards
The virtual-card offering supports specific-use account numbers with transaction-level controls and enhanced data capture.Read 15 Oct 2026 · network.americanexpress.com

Plans and prices

American Express Token Service Free No deployment or use fees stated; availability varies by market; issuer, merchant, acquirer, or service provider enablement required Read 2 Oct 2026 · network.americanexpress.com
American Express Token Service Priced on request For American Express Network issuers, acquirers, merchants and service providers · Country availability varies · Representative contact and certification may be required Read 15 Oct 2026 · network.americanexpress.com

Every American Express Token Service plan and price →

Strong points and limits

Strong points

  • Includes token vault and lifecycle management.
  • Tokens can be restricted by retailer or lifetime.
  • Supports card-on-file and digital wallet use cases.
  • Lifecycle management can update tokens when cards change.
  • Cloud deployment is listed.

Limits

  • Availability varies by market.
  • Enablement through an American Express relationship is required.
  • Network authorization certification is required for wallet and card-on-file transactions.
  • Pricing is on request.

Who it suits

It is for issuers, merchants, acquirers, and service providers considering tokenized online or mobile payments. Digital wallet and card-on-file transactions require network authorization certification.

American Express Token Service in depth

Read the full write-up

Overview

American Express Token Service is a network tokenization service for issuers, merchants and payment partners handling online and mobile payments. Its strongest case is for organizations already working through American Express; market access and certification make it a less straightforward choice for teams seeking a standalone vault.

It combines token issuance, a hosted vault, lifecycle management and risk controls. That breadth is useful across stored credentials, wallets and other digital payment experiences, provided the relevant market and network requirements fit.

Key features

Scoped credentials and provisioning

Tokens are unique substitutes for card numbers and can be restricted by retailer, use count, lifetime and other variables. Those controls help limit how a token can be used, while alignment with EMVCo Payment Tokenization specifications makes the service suited to network-based token programs.

During provisioning, issuers can check whether a card is active, suspected of fraud, eligible for tokenization and associated with the card member requesting the token. These checks give issuers a role in deciding whether a credential should be tokenized, rather than treating provisioning as a purely technical handoff.

Lifecycle and use cases

Lifecycle management can keep tokens current after card replacement, reducing the need for card members to update stored payment details manually. The lifecycle application supports Apple Pay, Google Pay, Samsung Pay, Card-on-File Tokenization and Click to Pay.

Card-on-file tokenization is focused on stored credentials for e-commerce, including subscriptions and recurring payments. Other use cases include virtual cards, browser-autofill virtual card numbers, and digital or numberless cards. The service also covers wearables and QR code payments among its payment methods.

Merchant and API considerations

Merchants storing tokens instead of card credentials may reduce the PCI-compliant infrastructure and audit requirements they need to support. That can be valuable for businesses managing stored payments, though it does not remove the need to meet applicable payment and network obligations.

The Token Service Cryptogram API supports eCommerce Cryptogram, which provides dynamic cryptographic authentication for e-commerce and card-on-file tokenization. Network authorization certification is required for digital wallet and card-on-file tokenization transactions, so this is not a plug-in option for every payment stack.

Pricing

The American Express Token Service plan is free. The service is marked as paid with pricing on request, while this plan states no deployment or use fees. Those terms make the plan price itself attractive, but they do not establish that enablement or access is universal: availability varies by market, and issuer, merchant, acquirer or service-provider enablement is required. There is no free trial.

Custom pricing is the practical expectation for organizations evaluating a deployment. Contact through an American Express representative or relationship manager is part of assessing availability and enablement, so this plan is best understood as a no-fee entry rather than a universally self-serve free service.

Platforms

Platforms include Android, iOS, web and API. The deployment model is cloud, with a vendor-hosted token vault and a detokenization API. This combination suits organizations integrating token services into online or mobile payment flows; it is not a self-hosted vault option.

Who it's for

The service is strongest for issuers, merchants, acquirers and providers that can engage American Express and need network tokenization across stored card credentials, wallets or Click to Pay. It is particularly relevant to e-commerce businesses with recurring transactions and issuers that want provisioning risk checks and lifecycle handling.

Look elsewhere if you need market-independent access, a self-hosted vault, or a deployment that avoids network authorization certification for wallet and card-on-file transactions.

Pros and cons

Pros: Token restrictions by retailer, use count and lifetime provide meaningful controls over credential use.

Pros: Lifecycle management can keep credentials current after card replacement, easing maintenance of stored payments.

Pros: The service combines vault, issuance, risk management and token cryptograms across several payment use cases.

Cons: Market availability and relationship-based enablement limit how readily a new organization can adopt it.

Cons: Authorization certification is a prerequisite for wallet and card-on-file transaction support.

Cons: Custom pricing means organizations should confirm commercial terms rather than assume the 0.00 USD plan resolves deployment costs.

Alternatives

Payment Tokenization Software is the broader category directory for comparing options.

DeloPay is worth considering when a paid transaction-based plan and a free trial suit your evaluation; its Power plan is $2.25 a month, billed at 2.25% per transaction for monthly volume of $100,000 to $500,000.

Hyperswitch Card Vault is a fit when self-hosting and community support matter more: its free Self-Host Community Edition includes 90+ payment integrations, while you manage compliance end to end.

Cashfree Token Vault is another paid option with Android, API, iOS and web platforms.

Basis Theory may suit teams seeking a priced platform plan: Standard platform costs $995 a month and includes 20,000 tokens, with an additional-token charge of $0.05.

FIS Data Integrity Manager is a paid, web-based alternative.

Worldpay eProtect is a paid alternative spanning Android, API, iOS and web.

IXOPAY may suit teams comparing a published starting price: plans start at $1,000 a month, with full pricing requiring contact.

Purse Vault is another option to evaluate if a demo-based sales process suits your selection.

Verdict

Choose American Express Token Service if your organization can secure network enablement and wants token issuance, risk checks and lifecycle management across card-on-file and wallet use cases. Its main advantage is the breadth of network token capabilities in one service; its main drawback is that market access, certification and custom commercial terms can make it a poor fit for teams seeking an independent, self-directed deployment.

Verdict

The service covers token issuance, controls, and lifecycle management for several payment use cases. Market availability, enablement, and certification requirements are important considerations.

Where Specifiction places it

Alternatives to American Express Token ServiceAll alternatives →