# Payment Optimization

## Zero PCI Scope

### [How It Works](https://docs.forter.com/zero-pci-scope#how-it-works)

Using this approach for Forter tokenization solution, you can process payments **without handling raw card details**, reducing PCI compliance scope and improving security.  
1. **Provision Tokens** – Obtain a secure token for a transaction.  
2. **Use Tokens** – Utilize token for payments, either in single-use or multi-use forms.

### [Provision Tokens](https://docs.forter.com/zero-pci-scope#provision-tokens)

#### [Collect card data](https://docs.forter.com/zero-pci-scope#collect-card-data)

This step ensures that you do not handle raw card data. Instead, the [Hosted Fields](https://docs.forter.com/hosted-fields-sdk "Hosted Fields") component securely transmits the card details to Forter and returns a **single-use token**.  
Single-use tokens ensure security by preventing direct card data storage. They are the first step before upgrading to a multi-use token for future transactions.

```sequenceDiagram
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant HF as Hosted Fields
    participant F as Forter Tokenization Server
    U->>HF: Insert Card Data {cardData}
    HF->>F: Send card data securely {cardData}
    F-->>CP: Response {forterSingleUseToken}
```

#### [Pay with Forter token](https://docs.forter.com/zero-pci-scope#pay-with-forter-token)

At this stage, you use the single-use token to complete a payment.

```sequenceDiagram
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant M as Merchant
    participant F as Forter Proxy
    participant P as Network/PSP
    U->>M: Pay {forterSingleUseToken}
    M->>F: Authorization {forterSingleUseToken}
    F->>P: Authorization {cardData}
    P-->>F: Response {authorizationOutcome}
    F-->>M: Response {authorizationOutcome}
    M-->>CP: Payment Succeeded/Failed
    CP-->>U: Payment Succeeded/Failed
```

Once authorized, the transaction is completed.

#### [Upgrade token (Optional)](https://docs.forter.com/zero-pci-scope#upgrade-token-optional)

After payment, you may [upgrade the token to multi-use](https://docs.forter.com/reference/upgrade-to-multi-use "upgrade the token to multi-use"), allowing future payments without requiring card re-entry. Forter provides two solutions for generating a multi-use token.

**1. Network Token**: Preferred by issuers, adds security, and increases approval rates.

```sequenceDiagram
sequenceDiagram
    autonumber
    participant M as Merchant
    participant F as Forter Tokenization Server
    participant CN as Card Network
    M->>F: Upgrade to Multi-Use Token <br/> {forterSingleUseToken, networkToken.provision=true}
    F->>CN: Provision Network Token {cardData}
    CN-->>F: Response {networkToken}
    F->>F: Create Multi-Use token {cardData, networkToken}
    F->>M: Response {multiUseToken}
```

**2. Multi-Use Token without Network Token:** If a network token isn’t available, Forter provides its own secure token.

```sequenceDiagram
sequenceDiagram
    autonumber
    participant M as Merchant
    participant F as Forter Tokenization Server
    M->>F: Upgrade to Multi-Use Token <br/> {forterSingleUseToken}
    F->>M: Response {multiUseToken}
```

### [Use Tokens](https://docs.forter.com/zero-pci-scope#use-tokens)

Once a token has been provisioned, you can use it for future payments. The method depends on whether a Network Token was issued.

**1. Use a Forter Token linked to a Network Token**

```sequenceDiagram
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant M as Merchant
    participant F as Forter Proxy
    participant CN as Card Network
    U->>CP: Pay with selected card
    CP->>M: Pay {selectedCardIndex}
    M->>F: Authorization <br/> {multiUseToken, networkToken.provision=true}
` ``

**2. Using a Forter Multi-Use Token (No Network Token).**

```sequenceDiagram
sequenceDiagram
    autonumber
    participant U as Buyer
    participant CP as Checkout Page
    participant M as Merchant
    participant F as Forter Proxy
    U->>CP: Pay with selected card
    CP->>M: Pay {selectedCardIndex}
    M->>F: Authorization <br/> {multiUseToken}
    F->>PSP: Authorization {cardData}
```