The token that is used by Hosted PCI looks like a real credit card. The first 4 digits and the last 4 digits of the token match those of the credit card number, but in fact, the token is not a real credit card number. By default, the token fails MOD 10 (Modulus 10) LUHN checks. The combination of the tokens is customizable according to the needs of the merchants. The available combinations are 4+8+4, 1+11+4, and 6+6+4.