Post-Quantum Smart Card: Toppan Launches Dual-Interface PQC CARD

What happened

Toppan Inc., a wholly owned subsidiary of Tokyo-listed Toppan Holdings, has developed what it describes as the world's first dual-interface smart card incorporating post-quantum cryptography (PQC). Branded the PQC CARD Dual, the card supports both contact and contactless transactions, meaning it can operate across the full range of point-of-sale and access-control environments in use today.

Post-quantum cryptography refers to encryption algorithms designed to resist attacks from quantum computers, which are expected to render many current cryptographic standards obsolete as the technology matures. By embedding PQC directly into a physical payment or identity card, Toppan is positioning the product at the intersection of near-term card infrastructure and longer-horizon quantum security threats.

Why it matters

For customer experience and service design practitioners, the significance here is less about cryptography per se and more about what happens to trust when the security layer underpinning everyday transactions is perceived — or proven — to be fragile. Payment cards, transit passes and identity credentials are among the highest-frequency physical touchpoints most people encounter. Any erosion of confidence in their integrity creates friction, anxiety and abandonment behaviours that are extremely difficult to reverse once established. Toppan's move signals that the card-issuance industry is beginning to treat quantum risk as a near-term product-design constraint rather than a distant theoretical concern.

From a behavioral economics standpoint, this also touches on the psychology of security theatre versus genuine assurance. Consumers cannot evaluate cryptographic strength directly; they rely on institutional cues — issuer reputation, certification marks, product naming — to form security judgments. A card explicitly marketed around quantum resistance may therefore influence perceived safety and willingness to use contactless payments in contexts where hesitancy currently exists, independent of whether quantum threats are yet live.

The Renascence take

The industry conversation around PQC tends to stay inside IT and compliance functions, framed as an infrastructure upgrade. That framing risks missing the more immediate opportunity: the moment of card issuance and onboarding is one of the few occasions when a financial institution has a customer's full attention and genuine curiosity about how their money is protected.

Most operators will treat PQC as a back-end specification change and say nothing to cardholders — which is precisely the wrong instinct. The behavioral principle at work is earned transparency: proactively communicating a security advancement, in plain language, at the point of issuance converts an invisible engineering decision into a tangible trust signal. A customer-obsessed issuer would script that moment deliberately — not as a compliance disclosure, but as a confidence-building interaction that reinforces the relationship. The card in the wallet becomes a physical reminder that the institution is working ahead of threats, not catching up to them.