The token that is used by Hosted PCI looks like a real credit card. The first 4 digits and the last 4 digits of the token match those of the credit card number, but in fact the token is not a real credit card number. By default the token fails MOD 10 (Modulus 10) LUHN checks. The combination for the tokens is customisable according to the needs of our clients. The available combinations are 4+8+4, 1+11+4 and 6+6+4.