 The keys for encryption and decryption are never available to the merchant, making card data entirely invisible to the retailer.Once the encrypted codes are within the secure data zone of the payment processor, the codes are decrypted to the original card numbers and then passed to the issuing bank for authorization.The bank either approves or rejects the transaction, depending upon the card holder's payment account status.