What virtual cards are and how they work with credit cards
A virtual card is a temporary card number generated by your credit card issuer that works like a regular card number but exists only in your account — not as a physical piece of plastic. When you use a virtual card number to shop online, the merchant sees that number instead of your actual card number. If that merchant's system gets breached or sells your data, the stolen number is useless because it's tied to nothing but that one transaction or vendor.
Virtual cards are generated through your credit card's mobile app or online portal. You can usually set limits on how much each virtual number can spend, restrict it to a single merchant, or set an expiration date. Once you're done using it, you delete it or let it expire. Your actual card number stays private.
Not all credit card issuers offer this feature. The ones that do include major banks and fintech companies, though the names and rules vary by issuer. Some call them "virtual card numbers," others use "digital wallet tokens" or "masked cards." The underlying idea is the same: a disposable number that protects your real account.
Key Takeaways
- Virtual card numbers are temporary numbers generated by your credit card issuer that hide your real card number from online merchants.
- Major issuers including Capital One, Citi, Bank of America, and American Express offer virtual card features, though availability varies by card type and account status.
- Virtual cards reduce fraud risk because a stolen number can only be used for the transaction or merchant it was created for, not your entire account.
- You control the spending limit, expiration date, and merchant restrictions for each virtual number you generate.
- Virtual cards work for online purchases but not for in-person transactions, subscriptions that require card updates, or recurring charges that need a stable number.
Which credit card issuers offer virtual card numbers
Capital One offers virtual card numbers through its Eno service, available to most Capital One credit cardholders through the mobile app or browser extension. Eno generates numbers on demand and can also auto-fill them at checkout on participating sites.
Citi provides virtual account numbers through Citi Virtual Account Numbers, available to most Citi credit cardholders. You generate them through your online account or mobile app and set spending limits and expiration dates.
Bank of America offers ShopSafe virtual numbers to cardholders, accessible through the online banking portal. You can create numbers for specific merchants and set custom limits.
American Express cardholders can use digital wallet tokens through Apple Pay, Google Pay, and Samsung Pay, which function similarly to virtual numbers by masking your real card number at checkout. Some Amex cards also offer a virtual card feature directly through the app.
Chase does not currently offer a dedicated virtual card number tool for most cardholders, though it integrates with digital wallets that provide similar protection.
Discover does not offer virtual card numbers as a standalone feature but supports digital wallet payments that mask your card number.
Availability depends on your card type, account status, and whether your issuer has rolled out the feature to your region. Check your card issuer's app or website to see if the feature is available on your account.
How virtual cards reduce fraud and identity risk
When you use your real card number online, that number is stored in the merchant's system. If the merchant is breached, your card number is exposed. A thief with your real card number can attempt to use it anywhere — other websites, phone orders, or resale on the dark web.
A virtual card number is tied to a single merchant, a single transaction, or a spending limit you set. If a thief steals that number, they cannot use it anywhere else. Most issuers also let you disable or delete a virtual number when ready, which stops any further charges when ready. Your real card number remains unknown to the merchant and stays protected in your issuer's system.
This is especially useful for one-time purchases from unfamiliar vendors, subscriptions you're testing, or merchants with weaker security. You're not eliminating fraud risk entirely — your issuer still processes the transaction — but you're removing the incentive to target your account specifically.
Limitations and situations where virtual cards don't work
Virtual cards work only for online purchases where you enter a card number at checkout. They do not work for in-person transactions at physical stores or gas pumps, because there's no physical card to insert or tap.
Recurring charges and subscriptions are problematic. If you create a virtual card for a monthly subscription, the merchant stores that number. When the subscription renews, the charge goes to that virtual number. If you delete the number before renewal, the charge fails and your subscription cancels. If you keep the number active, you lose the protection of a temporary number.
Some merchants reject virtual numbers outright, particularly older systems or those that perform extra security checks. A few subscription services and travel sites flag virtual numbers as high-risk and decline them.
Virtual cards also do not protect you from scams where you knowingly send money to a fraudster. If you're tricked into giving someone your virtual card number, that number works just as well as your real one for that transaction.
How to set up and use a virtual card
The process varies slightly by issuer, but the general steps are the same. Log into your credit card's mobile app or online account. Look for a section labeled "Virtual Cards," "Virtual Numbers," "Eno," or "Digital Security." Click the option to generate a new virtual number.
You'll see fields for the merchant name, spending limit, and expiration date. Enter the merchant you're buying from (for example, "Amazon" or "Target"), set a limit equal to or slightly above what you plan to spend, and choose how long the number should remain active — usually anywhere from one transaction to several months.
The issuer generates a complete card number, expiration date, and CVV. Copy these details and paste them into the checkout form on the merchant's website. Complete the purchase as normal. The charge appears on your regular credit card bill, but the merchant only sees the virtual number.
After the purchase, you can delete the virtual number when ready or let it expire on the date you set. Some issuers also let you pause or reactivate a number if you plan to use the same merchant again.
Virtual cards versus digital wallets and tokenization
Digital wallets like Apple Pay, Google Pay, and Samsung Pay also hide your real card number from merchants. When you pay through a digital wallet, the payment processor creates a token — a stand-in number — that the merchant sees instead of your actual card. This is called tokenization.
The difference is control and visibility. With a digital wallet, the tokenization happens automatically and you don't see the token number. With a virtual card number, you generate the number yourself, see it, and can set specific limits and expiration dates for each one.
Digital wallets are faster for repeat purchases and subscriptions because the token stays the same. Virtual cards are better for one-time purchases from unfamiliar vendors because you control exactly how much can be charged and for how long the number works.
Both offer fraud protection. Neither is inherently better — they solve the same problem in different ways. Many people use both: digital wallets for everyday online shopping and recurring charges, virtual cards for higher-risk or one-time purchases.
Comparing virtual card features across issuers
| Issuer | Feature Name | How to Access | Spending Limits | Expiration Control |
|---|---|---|---|---|
| Capital One | Eno | Mobile app or browser extension | Yes, custom per number | Yes, set by user |
| Citi | Virtual Account Numbers | Online account or mobile app | Yes, custom per number | Yes, set by user |
| Bank of America | ShopSafe | Online banking portal | Yes, custom per number | Yes, set by user |
| American Express | Digital wallet tokens | Apple Pay, Google Pay, Samsung Pay | Limited control | Issuer-managed |
| Chase | None (digital wallets only) | Apple Pay, Google Pay, Samsung Pay | Limited control | Issuer-managed |
Frequently Asked Questions
Do virtual cards cost extra or affect my credit score?
Virtual card numbers are a free feature included with most credit cards that offer them. Generating and using virtual numbers does not affect your credit score because they're tied to your existing account and credit line, not a new account. The charges appear on your regular bill just like any other purchase.
Can I use a virtual card number for subscriptions?
You can, but it requires planning. Create a virtual number specifically for that subscription and keep it active for as long as you want the subscription to continue. If you delete the number before the next billing date, the charge will fail and your subscription will cancel. For subscriptions you plan to keep long-term, a digital wallet token is usually easier because it stays stable.
What happens if a merchant rejects my virtual card number?
Some older checkout systems or merchants with strict fraud filters reject virtual numbers. If this happens, you can try using your real card number instead, or contact the merchant's customer service to ask if they accept virtual numbers. A few merchants straightforward don't support them, and there's no workaround.
Can I see all my virtual card numbers in one place?
Yes. Your card issuer's app or online account shows all active virtual numbers you've created, along with their spending limits, expiration dates, and transaction history. You can view, pause, or delete them from this dashboard.
Is a virtual card number safer than a digital wallet?
Both offer similar fraud protection because both hide your real card number from merchants. Virtual cards give you more control over limits and expiration, while digital wallets are faster for repeat purchases. For maximum protection, use virtual cards for one-time purchases from unfamiliar vendors and digital wallets for trusted merchants and subscriptions.