Issuin icon

Webhooks for network tokens

Learn which webhooks Adyen sends when your cardholders add Adyen-issued cards to digital wallets.

Adyen sends webhooks for events in network token lifecycles. When your cardholders add their Adyen-issued cards to digital wallets like Apple Pay or Google Pay, Adyen replaces the card data with a network token. Learn more about network tokens in Tokens for digital wallets.

These webhooks help you monitor and control tokenized cards. This page covers the following events:

In your Customer Area, subscribe to Configuration webhooks to get these events. They help you track where your cards are tokenized, respond to provisioning decisions, and audit network token activity.

Webhook types

Webhook messages inform you when Adyen creates or updates a network token, and whether the cardholder must complete authentication before Adyen activates the token.

You can identify the webhooks triggered by network token events by using the following values:

Parameter Description Value
type The webhook type. balancePlatform.networkToken.created or balancePlatform.networkToken.updated
data.status The status of the network token.
  • inactive: Not yet activated.
  • active: Ready for payments.
  • suspended: Temporarily disabled.
  • closed: Permanently closed.
data.decision The decision for the network token request. approved, requireAuthentication, declined

Network token created

Adyen sends a balancePlatform.networkToken.created webhook message when a cardholder adds their Adyen-issued card to a digital wallet. At this point in the provisioning flow, Adyen has received the network token request from the card scheme, created a network token with status inactive, and completed the risk analysis.

The decision field specifies the outcome of the risk analysis and determines what happens next in the wallet:

  • requireAuthentication: The digital wallet shows the cardholder a verification screen. Adyen requires two-factor authentication (OTP through SMS or email) or phone call verification before activating the token.
  • approved: The risk analysis passed. Adyen activates the token automatically without further cardholder action.

Network token created with authentication required

Adyen sends this webhook message when the risk analysis requires identity verification before activating the token. At this point in the provisioning flow, the cardholder sees a verification screen in their wallet app, or a prompt to contact your call center.

Use this webhook message to show a "pending verification" status for this card in your app.

The webhook message contains:

  • type: balancePlatform.networkToken.created
  • status: inactive
  • decision: requireAuthentication

Network token created without authentication required

Adyen sends this webhook message when the risk analysis determines low risk and no cardholder verification is required. At this point in the provisioning flow, Adyen activates the token automatically. After receiving this webhook message, expect a balancePlatform.networkToken.updated webhook message that confirms the token is active.

The webhook message contains:

  • type: balancePlatform.networkToken.created
  • status: inactive
  • decision: approved

Network token updated

Adyen sends a balancePlatform.networkToken.updated webhook message when the status of a network token changes. These webhook messages correspond to the later stages of the provisioning flow, after Adyen has completed the risk analysis and the cardholder has completed any required verification.

Provisioned without authentication

Adyen sends this webhook message after activating a network token automatically without cardholder verification. At this point in the provisioning flow, the card is available in the cardholder's digital wallet and ready for payments.

Use this webhook message to update your app UI to show the card is active in the wallet.

The webhook message contains:

  • type: balancePlatform.networkToken.updated
  • status: active
  • authenticationApplied: false

Provisioned with authentication

Adyen sends this webhook message after activating a network token that required identity verification. At this point in the provisioning flow, the cardholder has completed either two-factor authentication (OTP through SMS or email) or phone call authentication. The card is available in the cardholder's digital wallet and ready for payments.

Use this webhook message to update the card status in your app from "pending verification" to active.

The webhook message contains:

  • type: balancePlatform.networkToken.updated
  • status: active
  • authenticationApplied: true

Network token closed

Adyen sends this webhook message when a network token is permanently closed. This happens in the following scenarios:

  • Provisioning declined: The risk analysis failed and Adyen closed the token automatically. The cardholder cannot add the card to the wallet.
  • Cardholder removed the card: The cardholder removed the card from their digital wallet.
  • Token revoked with the API: You closed the token by making a PATCH /networkTokens/{networkTokenId} request.
  • Payment instrument closed: The underlying payment instrument was closed.

Use this webhook message to update your app UI to reflect that the card is no longer available in the wallet.

The webhook message contains:

  • type: balancePlatform.networkToken.updated
  • status: closed

See also