Skip to main content
Secure Credential Services by PayPal is a unified platform of secure credential solutions designed to support diverse payment needs across channels and use cases. It provides a comprehensive suite of services that enable businesses to securely manage and utilize payment credentials, ensuring seamless and secure transactions for cardholders. Network tokenization serves as the core of everything. It’s the foundational capability that replaces sensitive payment credentials with secure, network-issued tokens. The Secure Credential Services portfolio includes:
  • Ecommerce tokens: Network tokens for card-not-present online transactions. These tokens replaces stored card numbers with network-issued tokens and one-time cryptograms, so sensitive card data is never transmitted or stored in the clear during online checkout.
  • In-store tap-and-pay credentials: Contactless payment credentials for physical point-of-sale. These enable cardholders to pay by tapping a device at a terminal, using credentials provisioned and managed through the same tokenization infrastructure as online payments.
  • Device-bound credentials: Credentials scoped to a specific device for enhanced security. The credential is tied to a particular device, it cannot be used from another device, reducing the risk of unauthorized use if account details are compromised.
Because all credential types share a common tokenization infrastructure, partners can adopt new capabilities incrementally without redesigning their existing payment stack. This helps businesses to expand their payment offerings and adapt to evolving consumer preferences while maintaining a consistent and secure payment experience across channels, enhancing security, reducing fraud, and providing cardholders with convenient payment options.

​
How Secure Credential Services works

Secure Credential Services (SCS) operates through PayPal’s Token Service Provider (PP TSP). This is a centralized orchestration layer that serves between your platform and the card networks. Instead of building and maintaining separate integrations with Visa, Mastercard, American Express, and Discover, you connect to PP TSP once, which handles tokenization, credential management, and lifecycle operations on your behalf. Products in the SCS portfolio are built on this shared infrastructure. Implementation details, end-to-end flows, and API references are available within each product’s guide.