01
Document overview
Officially listed CBO guidance for banks and payment service providers offering card-tokenization services, where a primary card number is replaced by a payment token for compatible devices.
02
Scope and exclusions
Applies to
Relevant to banks, PSPs, card schemes, wallets, processors and technology providers launching contactless and mobile payments.
Limitations and exclusions
Tokenization does not replace licensing, PCI controls, authentication, fraud management, data protection, AML/CFT or card-scheme agreements.
04
Official source
CBO Guidelines for Card Tokenization · listed in current FinTech policies · Central Bank of Oman
September 13, 2026
Open official source ↗