This invention is related to secure payments using data codes displayed on a mobile device, for example a QR code displayed on a cell-phone. The invention establishes a third party transaction service that protects the customer's proprietary payment information, for example, credit card numbers, while ensuring for a merchant that a payment token, for example, the QR code, will represent a valid payment.