Tokenized account numbers (TANs) are temporary bank account numbers issued by some banks instead of real account numbers.
NOTE: Only Chase Bank, PNC Bank, and U.S. Bank issue TANs. If your payout bank account is not at one of those banks, this page does not apply to you.
How do TANs work?
↑ Back to topWhen you connect your bank account to WooPayments, your bank may provide a TAN instead of your actual account number. This is because TANs are a security measure designed to safeguard your real banking credentials.
To aid in this protection, banks may periodically refresh your TAN. When this happens, the last four digits of your payout bank account may change, even though your actual underlying bank account has not changed.
This is normal and expected behavior. Your payouts will continue to be routed to the same bank account as they were before the TAN refresh. No action is needed on your part. You do not need to re-add or re-verify your bank account.
TAN deactivation
↑ Back to topSometimes a TAN may be completely deactivated rather than refreshed. (For example, should you revoke our access to your payout bank account.)
A deactivated TAN can cause payout failures. If this happens, you will need to re-add a bank account to WooPayments by following the usual process. This can be the same bank account you had before, or a totally different one.
March 2026 incident
↑ Back to topIn March 2026, some WooPayments merchants affected by a U.S. Bank TAN refresh mistakenly received an email with the subject line: “Someone updated the account that you receive payouts to.” Unfortunately, this caused a great deal of concern, since these merchants had not knowingly changed their payout bank accounts.
We have since updated our systems to differentiate between human-initiated payout bank account changes and automated TAN refreshes. Going forward, we will only send email messages when the bank account change is performed by a person.
