Some digital wallets simply hold a tokenised link to an underlying card; others hold their own e-money balance, and an issuer offering that balance is regulated as an e-money institution under the Electronic Money Regulations 2011, supervised by the FCA. Either way, PCI DSS v4.0 limits how the funding source is kept once it reaches an export. anonym.plus marks each value on your device, so the dataset stays analysable while customer data is shielded.
When this applies
The file lists device tokens, the funding source, and a customer email. You strip those identifiers under the standard before any analysis loads.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- The tool flags the funding source, token, and email data.
- It reads JSON and CSV columns row by row.
- Keep device type and currency columns for analysis.
- Apply Replace with a steady label per field.
- Save the clean copy locally.
What you need to provide
- The wallet export (JSON, CSV, or TXT).
- An operator (Replace keeps columns analysable).
- Optional name map for a reversible join later.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Account | CREDIT_CARD | funding card → [CARD] |
| Contact | EMAIL_ADDRESS | wallet email → [EMAIL] |
| Names | PERSON | wallet holder → [HOLDER] |
| Contact | PHONE_NUMBER | device phone → [PHONE] |
| Location | LOCATION | billing region → [REGION] |
| Amount | MONEY | spend total → kept |
Compliance achieved
- Limits stored payment data per PCI DSS v4.0.
- Recognises that a wallet holding its own balance is supervised as an e-money issuer under the Electronic Money Regulations 2011.
- Keeps device and currency columns for analytics.
- Offline handling keeps the export off any server.
Anonymise wallet exports offline — see plans & start free →
Limitations & cautions
A device token can still link to a customer if a lookup table is kept. Turn the name map off for true anonymity, and review rare field combinations before release.
Frequently asked questions
Does it flag a device token?
Yes. The funding source, token, and email are flagged so each can be replaced with a steady label.
Why do the Electronic Money Regulations 2011 matter to a wallet export?
Where the wallet holds a genuine e-money balance rather than just a pointer to an underlying card, the issuer is regulated under those Regulations and supervised by the FCA — a different regime from a card issuer, though PCI DSS v4.0 still applies to any card data the wallet references.
Is the export uploaded?
No. The app is fully offline, so the data stays on your device.