What a virtual credit card is and how it works
A virtual credit card is a temporary card number linked to your real credit card account. When you shop online or make a payment over the phone, you use this temporary number instead of your actual card number. The charge still goes to your real account, but the merchant never sees your real card details.
Your card issuer generates a unique number, expiration date, and security code (CVV) for each transaction or time period you set. If a merchant's website gets hacked or a scammer intercepts your payment, they have only that temporary number — which either expires after one use or stops working on a date you choose. Your actual card number stays protected.
Most major banks and credit card companies now offer virtual cards through their mobile apps or online portals. Some issuers call them "temporary card numbers," "digital card numbers," or "masked cards." The concept is the same: a disposable number that shields your real account.
Key Takeaways
- Virtual card numbers are temporary, unique numbers tied to your real credit card account that expire after one use or on a date you set.
- You generate a new virtual number through your card issuer's app or website, then use it for online purchases instead of your real card number.
- If a merchant is hacked or a number is stolen, the temporary number is worthless because it has already expired or is tied to a spending limit you set.
- Not all merchants accept virtual cards, and some subscription services or recurring charges may reject them because the number changes.
- Virtual cards work best for one-time purchases, trying new retailers, or high-risk transactions where you want an extra layer of security.
How to set up a virtual card through your bank or issuer
The first step is to check whether your card issuer offers virtual cards. Log into your credit card's mobile app or online account portal and look for a section labeled "Virtual Card," "Card Controls," "Digital Card," or "Temporary Numbers." If you do not see it, call the customer service number on the back of your card and ask whether the feature is available on your account.
Once you find the feature, the issuer will walk you through the setup. You typically choose whether the virtual number is good for a single transaction or for multiple purchases over a set time period — often 30 days, 90 days, or until you manually delete it. Some issuers let you set a spending limit on the virtual card, so even if someone steals the number, they cannot charge more than the amount you chose.
After you confirm your settings, the issuer generates a new card number, expiration date, and CVV code. Write these down or take a screenshot, because you will need them when ready for your purchase. The virtual number is ready to use right away.
Where and when to use a virtual card number
Virtual cards work best for online shopping at retailers you have never used before or at websites with a higher risk of data breaches. If you are buying from a small or unfamiliar merchant, or if you are testing a subscription service before committing to it, a virtual card protects your real account number from being stored or stolen.
They also work well for one-time purchases — buying a plane ticket, ordering from a new online store, or paying for a service you will use once. After the transaction completes, the virtual number expires, so the merchant cannot charge you again without your permission.
Avoid using virtual cards for recurring charges like gym memberships, streaming services, or insurance payments. Many merchants' billing systems reject virtual numbers because they expect the same card number to work every month. If the virtual number expires or changes, the recurring charge will fail, and your service may be interrupted.
What happens when a virtual card number is compromised
If a merchant's database is hacked and your virtual card number is stolen, the thief has a number that either has already expired or is set to expire soon. They cannot use it to make new charges because the number is no longer valid. This is the main security advantage: a stolen virtual number has a built-in expiration date.
If you set a spending limit on the virtual card — for example, $50 for a single purchase — a thief cannot charge more than that amount even if they somehow use the number before it expires. You control both the time window and the dollar amount, which limits the damage if something goes wrong.
If you notice fraudulent charges on your real account, report them to your card issuer the same way you would report any other fraud. The issuer will investigate and reverse the charges. Virtual cards reduce the risk of fraud, but they do not eliminate it entirely — your real account is still the target if someone gains access to your login credentials.
Limitations and situations where virtual cards do not work
Not every merchant accepts virtual card numbers. Some older payment systems, small retailers, or international websites may reject them because the system flags the temporary number as suspicious. If a virtual card is declined, you will need to use your real card number or find a different payment method.
Subscription services and recurring billing are the most common problem. When your virtual card number expires, the merchant's system cannot charge you the next month because the number no longer works. Your service will be interrupted unless you update your payment method with the real card number.
Some merchants require the billing address and cardholder name to match exactly. If your virtual card is issued under a slightly different name or address than what you enter at checkout, the transaction may be declined. Check your card issuer's settings to see what name and address are attached to the virtual number.
Virtual cards versus other security tools
Virtual cards are one layer of protection, but they work best alongside other security habits. Using a strong, unique password for each online account prevents hackers from accessing your account even if they have your card number. Enabling two-factor authentication on your email and payment accounts adds another barrier.
Some credit card issuers also offer purchase protection, fraud monitoring, and the ability to freeze or unfreeze your card when ready through their app. Virtual cards complement these tools but do not replace them. If you use a virtual card and also monitor your account regularly for unauthorized charges, you have multiple layers of defense.
For the highest security, combine virtual cards with a password manager to store unique passwords, and check your credit report once a year through AnnualCreditReport.com to catch identity theft early. No single tool is perfect, but using several together significantly reduces your risk.
Frequently Asked Questions
Can I use a virtual card number at a physical store?
No. Virtual card numbers work only for online purchases, phone orders, and mail orders where you type in the card details. You cannot use a virtual number at a checkout counter or ATM because the merchant needs to read a physical card. For in-store purchases, you must use your real card or another payment method.
What happens if I delete a virtual card before the transaction goes through?
If you delete the virtual number before the charge is processed, the transaction will be declined. The merchant will not be able to charge you because the number no longer exists. If you need to make a purchase, generate a new virtual number before you submit your order.
Do virtual cards affect my credit score?
No. Virtual card numbers are tied to your real credit account, so charges made with a virtual number are reported to credit bureaus the same way as charges made with your real card. The virtual number itself does not appear on your credit report — only the underlying account does.
Can I use a virtual card to withdraw cash from an ATM?
No. Virtual card numbers work only for purchases and payments where you enter the card details online or over the phone. ATMs require a physical card or a real card number linked to a PIN. You cannot use a virtual number to withdraw cash.
What if a merchant asks for my card number but will not accept the virtual number?
Some older payment systems or international merchants may reject virtual numbers. If that happens, you have two choices: use your real card number if you trust the merchant, or find a different retailer that accepts virtual cards. You can also contact the merchant's customer service to ask whether they support temporary card numbers.