Card-on-file

Card-on-file (CoF) allows you to store your customers’ payment credentials securely for future use, so returning customers can pay faster without re-entering their card details.

After obtaining the cardholder’s consent, finby securely stores the payment credentials and returns a unique card reference to you. This reference is specific to your merchant integration and cannot be used to reconstruct the full card details. You use it to initiate future charges without handling sensitive card data yourself.

The exact structure of the reference you receive depends on your chosen card integration. For implementation details, see our API documentation for:

• Popup integration
• Embedded fields integration

Using these references, you can process:

• subsequent card-on-file transactions (unscheduled MIT), and
• recurring subsequent payments,

without requiring new card entry from the customer and without directly storing card details.

Refer to the Network tokenization section to learn more about how finby may use scheme-level network tokens internally to improve security and authorization performance. These network tokens are managed by finby and are not exposed as card references to you.