A method is disclosed and includes receiving a token request message in response to a user interaction of a first user. The method also comprises obtaining a token in response to receiving the token request message; transmitting the token to a resource provider, where the resource provider stores the token, provides a notification to a user communication device of a second user, receives a response to the notification, and then transmits an authorization request message comprising the token. The method also includes receiving the authorization request message comprising the token, detokenizing the token to a real credential, and transmitting a modified authorization request including the real credential to an authorizing entity computer for authorization.