A method for performing a transaction, comprising: receiving, by a server computer from a computing device, first data comprising at least a unique identifier associated with an access device in a transaction and payment data of a user of the computing device; verifying, by the server computer, the first data utilizing the received unique identifier; transmitting, from the server computer to a token provider computer, a token request message including the payment data; receiving, by the server computer from the token provider computer, a token response message comprising a token and/or a token cryptogram for the payment data; associating, by the server computer, the token and/or token cryptogram with the unique identifier; generating, by the server computer, a session key; generating, by the server computer, encrypted data utilizing the session key by encrypting the received token and/or token cryptogram using the session key; transmitting second data comprising the encrypted data from the server computer to the computing device; receiving, by the server computer from the access device, third data comprising the encrypted data; generating, by the server computer, decrypted data utilizing the encrypted data and the session key by decrypting the encrypted data utilizing the session key to obtain the token and/or token cryptogram; verifying, by the server computer, the decrypted data by comparing the token and/or token cryptogram in the decrypted data to the token and/or token cryptogram associated with the unique identifier; and in response to verifying the decrypted data, transmitting, from the server computer to a transport computer, an authorization request message for the transaction comprising at least some portion of the third data and the token and/or token cryptogram. receiving, by a server computer from a computing device, first data comprising at least a unique identifier associated with an access device in a transaction and payment data of a user of the computing device; verifying, by the server computer, the first data utilizing the received unique identifier; transmitting, from the server computer to a token provider computer, a token request message including the payment data; receiving, by the server computer from the token provider computer, a token response message comprising a token and/or a token cryptogram for the payment data; associating, by the server computer, the token and/or token cryptogram with the unique identifier; generating, by the server computer, a session key; generating, by the server computer, encrypted data utilizing the session key by encrypting the received token and/or token cryptogram using the session key; transmitting second data comprising the encrypted data from the server computer to the computing device; receiving, by the server computer from the access device, third data comprising the encrypted data; generating, by the server computer, decrypted data utilizing the encrypted data and the session key by decrypting the encrypted data utilizing the session key to obtain the token and/or token cryptogram; verifying, by the server computer, the decrypted data by comparing the token and/or token cryptogram in the decrypted data to the token and/or token cryptogram associated with the unique identifier; and in response to verifying the decrypted data, transmitting, from the server computer to a transport computer, an authorization request message for the transaction comprising at least some portion of the third data and the token and/or token cryptogram.