How to change the token device programatically?

How to change the token device programatically?

Hello,
consumers might have a token that I provide over e-mail, however, once he uses the token, I want programmatically swap that disclosed token over e-mail by a new generated automatically in "background at Tago" that the consumer does not see or share with other people.

Is it possible? If so, how?