Tokenisation Sells Security and Buys Lock-InNarrow moat
Visa (V) — moat facet
The rare product in this portfolio that reinforces the core moat instead of merely diversifying away from it.
Tokenisation is sold as a security service and functions as a retention mechanism, and both descriptions are accurate at once. A merchant that stores tokens rather than card numbers reduces its breach exposure and its compliance burden, which is why it buys — and provisioning is now live across more than 1.4 billion Visa cards with over 600 participating issuers1. It also ends up holding a stored credential whose continuity Visa manages.
The commercial elegance is that every party gets what it wanted. The merchant genuinely is safer. The subscription genuinely does keep working when the card is reissued rather than failing and triggering a cancellation. And the credential genuinely is harder to replace, because replacing it means asking customers to re-enter card details they have long forgotten providing.
This is the rare product in the value-added portfolio that reinforces the core moat rather than merely diversifying away from it — which is worth noting precisely because the rest of the portfolio does the opposite. Fraud scoring and advisory make Visa money without making the network stickier. Tokenisation does both.
Provisioning is live across more than 1.4 billion cards with over 600 issuers, and each newly tokenised credential is harder to displace than the number it replaced.
Tokenised transactions route through Visa's processing. If processing revenue grows slower than processed transactions (+9%), the security is being given away.
- ReportedA merchant that stores tokens rather than card numbers reduces its breach exposure and its compliance burden, which is why it buys — and provisioning Visa Inc. Form 10-K for the fiscal year ended September 30, 2025 (CIK 1403161), Item 1 Business — the network reaches approximately 12 billion cards, bank accounts and digital wallets and more than 175 million merchant locations across more than 200 countries and territories; nearly five billion payment credentials; clients comprise nearly 14,500 financial institutions; Tap to Pay provisioning is live for more than 1.4 billion Visa credit and debit cards with more than 600 participating issuers; Visa Direct processed more than 12.5 billion transactions for more than 650 partners and can reach approximately 12 billion endpoints through more than 90 domestic payment schemes and more than 60 card and wallet networks; during fiscal 2025, 329 billion payments and cash transactions carried the Visa brand, an average of 901 million a day, of which 258 billion were processed by Visa; the Visa as a Service stack's access layer includes on-demand APIs and an MCP server enabling AI systems to interface with Visa Intelligent Commerce APIs; stablecoins, generative AI and agentic commerce are named as next-generation technologies under investment — FY2025 (year ended 30 September 2025) · publ. 6 November 2025 · source ↗