Payment Update Tokens
How customer payment-update links fit into failed-payment recovery.
Payment-update tokens let a customer update payment details during recovery without exposing an admin session. Your application owns the customer-facing form and gateway collection flow.
Why tokens exist
Failed-payment recovery usually needs a link in email, SMS, support chat, or an in-app banner. A payment-update token scopes that link to the subscription and limits what the customer can do.
Flow
- Create a token for the failed subscription.
- Send the token in a recovery link.
- Verify the token before showing the update form.
- Collect new payment details through the payment gateway.
- Store the reusable gateway token as a customer payment method.
- Activate the token so the recovery flow records the use.
Limits
- Tokens expire.
- Tokens have a maximum use count.
- Tokens do not collect card details directly.
- The gateway still owns payment-detail collection.
API details are in Dunning API.