The merchant and the referrer will get the token that the user pays with.