Replacing a sensitive value, such as a card number, with a substitute token that has no exploitable meaning outside the system that issued it.
When a card is added to a phone wallet, the device stores a token rather than the actual PAN. If the token is intercepted, it cannot be used elsewhere.
Tokenization reduces the scope of data a merchant must protect, since the real card number never reaches their systems.
