A method is disclosed, and includes receiving from a token requestor, a token data request message comprising an initial resource provider identifier, and determining a permanent resource provider identifier using the initial resource provider identifier. The method also includes determining a verification value, and associating the permanent resource provider identifier with a token, the verification value, and domain controls. The method also includes providing a token data response message including a verification value to the token requestor, receiving an authorization request message comprising the token, the verification value, and one or more data elements in a plurality of data fields, determining the permanent resource provider identifier using the one or more data elements in the plurality of data fields, and determining that the verification value in the authorization request message matches the verification value that was provided to the token requestor, and that a transaction satisfies the domain controls.