3 ms·
What sort of tracking are you worried about? If you're worried about merchant-level tracking, I think tokenization makes little or no difference. Quoting from
by fpgeek 12y ago
What sort of tracking are you worried about?
If you're worried about merchant-level tracking, I think tokenization makes little or no difference. Quoting from the article:
"Tokenization is typically handled by the payment network, which (in some implementations) encrypts the credit card number right when you swipe it, sends it back for the token, and then provides that to the merchant to keep for things like refunds or customer tracking."
The only potential merchant-level tracking difficulty I can see is that tokens can be merchant-specific, which might make unified customer tracking more difficult after a merger. And even if financial institutions didn't provide services like post-merger token-matching (something I wouldn't bet on), plenty of merchants have quite a bit of experience using other signals to approximate that kind of matching.
- gergles 12y agoContactless EMV also doesn't send the name, making it much much much much harder for companies to try to guess who you are to add you to their mailing list (why do you think companies ask for your ZIP code so much? Name + ZIP uniquely identifies a lot of the population). (Contactless MSD doesn't either - it normally sends something like "VALUED CUSTOMER" or "NOT AVAILABLE")