Correction to: Nature Communications https://doi.org/10.1038/s41467-023-39519-w, published online 29 June 2023

The original version of this Article contained an error in the Discussion section, 4th paragraph, 6th sentence, which incorrectly read ‘Remarkably, we can amend our protocol such that the number of purchases is not bounded by the MAC function: the Client simply encrypts a new random key R with C, and forwards the result along with the cryptogram to the TTP.’ The correct version is ‘We can amend our protocol such that the number of purchases is not bounded by the MAC function, by growing C during the payment process: when the Client receives a new quantum token |P〉, we append additional quantum states for QKD, and use the cryptogram κ for authentication.’

This has been corrected in both the PDF and HTML versions of the Article.