In-App Provisioning is the process of allowing cardholders to securely add their banking cards to digital wallets (e.g., Apple Pay, Samsung Pay, Google Pay, Fitbit Pay) directly from a bank's mobile app, without needing to use third-party platforms or interfaces.
In-App Provisioning ensures a seamless card enrollment journey by eliminating the need for customers to manually enter card details in digital wallets. It provides a frictionless experience with instant provisioning and activation, reducing user effort and enhancing convenience.
The service supports a wide range of digital wallets, including:
Yes. In-App Provisioning uses EMV® tokenization to replace sensitive card information with a secure, unique token for each transaction. This ensures cardholder data is never shared or stored during provisioning and subsequent payments. Additional layers of security like biometrics, PIN, or OTP are used for user authentication.
In-App Provisioning supports the addition of debit, credit, and prepaid cards issued by the bank, as long as they are compatible with the wallet platform.
The solution adheres to PCI-DSS standards, EMVCo tokenization specifications, and platform-specific guidelines (e.g., Apple, Google, and Samsung wallet requirements). It is designed to comply with industry regulations and mandates.
Key benefits for banks include:
Yes. Customers need an internet connection to interact with the app and complete the provisioning process since the app must communicate with the wallet platform's servers.
Yes, the service supports provisioning the same card to multiple wallets. For example, a cardholder can add their debit card to both Apple Pay and Google Pay via the mobile app.
When a cardholder changes their device, they will need to re-provision their cards to digital wallets on the new device through the bank’s mobile app. The app provides a secure and user-friendly way to do this.
Tokenization replaces the card’s primary account number (PAN) with a unique token, ensuring the actual card details are never exposed during payments. Even if the token is intercepted, it cannot be reused outside the intended wallet or device.