Patent attributes
A method for provisioning a payment account to a mobile wallet on a mobile device includes receiving, by a provider computing system, an encrypted network return address of the mobile wallet that uniquely identifies a network address of the mobile wallet when the encrypted network return address is decrypted from an initiating device, receiving, by the provider computing system, an encryption key configured to decrypt the encrypted network return address, wherein the encryption key is not provided to the initiating device, decrypting, by the provider computing system, the encrypted network return address using the encryption key, and provisioning, by the provider computing system, a payment token associated with the payment account to the mobile wallet based on the decrypted network return address received from the initiating device by transmitting the payment token to the mobile device without going through the initiating device.