a method and system are presented for making a secure payment transaction using a payment card associated with a consumer which has been registered with a digital wallet . a secure server is arranged , in response to a request from a merchant server in relation to the consumer , to extract from the digital wallet payment credentials for the payment card . the secure server uses the payment credentials and the identity of the merchant server to generate a token . the token is provided to the merchant . to effect a payment transaction , the merchant server returns the token to the secure server with details of the desired payment transaction , and the secure server arranges for the payment transaction to occur , and notifies the merchant server . the merchant server does not receive the payment credentials of the payment card during this process , so even if its security is compromised , the payment credentials are not at risk .