What a virtual credit card is and how it works
A virtual credit card is a temporary card number linked to your real credit card or bank account. Instead of using your actual card details online, you generate a unique number that works only once or for a single merchant. The charge still comes from your real account, but the merchant never sees your actual card number.
Virtual cards are issued by your bank or credit card company through their app or website. You request a new number, set a spending limit and expiration date if you want, and use it when ready for that purchase. Once the transaction completes or the card expires, that number becomes useless — even if someone intercepts it, they cannot use it again or access your real card details.
The main reason people use them is security. If you are buying from a new online store or a site you do not fully trust, a virtual card number protects your actual card from fraud. If the merchant's database is hacked, the stolen number is already dead. You also get a record of exactly which merchant has which number, so you can spot unauthorized charges when ready.
Key Takeaways
- Virtual card numbers are generated by your bank or credit card issuer and linked to your real account, but merchants see only the temporary number.
- Most major banks and credit card companies now offer virtual cards through their mobile app or online portal at no extra cost.
- You can set a spending limit, expiration date, and merchant category for each virtual card to control how it is used.
- Virtual cards work for online purchases and some in-app transactions, but not for in-person payments at physical stores.
- The real card still appears on your statement and earns rewards or cash back the same way a physical card does.
Which banks and card companies offer virtual cards
Most major credit card issuers now include virtual card numbers as a standard feature. Capital One, Chase, American Express, Citi, Bank of America, and Discover all offer them through their mobile apps. If you have a credit card from any of these companies, you likely already have access — you just need to open the app and look for a "virtual card" or "card controls" section.
Some banks also offer virtual cards tied to checking or savings accounts. Chime, a digital bank, generates virtual numbers for debit transactions. Traditional banks like Wells Fargo and U.S. Bank have rolled out similar features in recent years. The exact name and location in the app varies — some call it "virtual card," others say "temporary card number" or "card lock."
If your bank or card issuer does not offer virtual cards yet, you have two other routes. Some third-party services like Privacy.com and Blur generate virtual numbers that work with most credit or debit cards, though they may charge a monthly fee or limit how many you can create. You can also contact your card issuer directly and ask whether they plan to add the feature — many are rolling it out gradually.
How to generate and use a virtual card number
The process is nearly identical across all major issuers. Open your bank or credit card app, find the card management or security section, and look for an option to create a virtual card. Tap it, and the app generates a new 16-digit number, expiration date, and CVV code when ready.
Before you use it, you can usually set optional controls. Most apps let you choose a spending limit (for example, $50 for a single purchase), an expiration date (anywhere from one day to a few months), and sometimes a merchant category (like "groceries only"). These limits are not required — you can just accept the defaults and use the number right away.
Copy the number and use it exactly like a physical card: enter it in the checkout form, paste it into a payment field, or scan it if the merchant supports digital wallet payments. The transaction processes normally, and the charge appears on your real card statement. Once the purchase completes or the card expires, that number stops working. If you need another one, generate a fresh number in the app.
What virtual cards do and do not protect you from
Virtual cards protect you from card number theft — if a merchant's database is breached or a website is compromised, the stolen number is already expired and useless. They also help you spot fraud quickly, because you know exactly which merchant has which number. If a charge appears under a number you gave to Store A, you know Store A either charged you twice or had a breach.
Virtual cards do not protect you from scams where you willingly send money to a fraudster, because the problem is not the card number — it is that you sent the money to the wrong person. They also do not work for in-person purchases, subscriptions that require a stable card number, or merchants that verify your address or CVV in real time. Some subscription services will reject a virtual card if the number changes or expires.
Virtual cards also do not replace fraud monitoring or dispute rights. If someone uses your virtual card number without permission, you still report it to your card issuer the same way you would report any other charge. Your card issuer's fraud protection and your right to dispute charges remain the same.
Virtual cards versus other security tools
Virtual cards are one layer of protection, but they work best alongside other habits. A strong, unique password for each online account prevents someone from accessing your account even if they have your card number. Two-factor authentication (a code sent to your phone when you log in) stops unauthorized access even if your password is stolen. A password manager stores long, random passwords so you never reuse them across sites.
Virtual cards are more practical than some alternatives. Paying with a digital wallet like Apple Pay or Google Pay also hides your real card number, but it works only on phones and in stores that support it. Requesting a new physical card for each purchase is not realistic. Paying by check or money order is slow and leaves a paper trail. Virtual cards give you the security benefit without changing how you shop online.
If you are concerned about a specific merchant or unsure whether a site is trustworthy, a virtual card is the fastest way to reduce your risk. If you are worried about account takeover or password theft, focus first on a password manager and two-factor authentication — those protect your entire account, not just one transaction.
Costs and limits you should know about
Virtual cards issued directly by your bank or credit card company cost nothing. There is no fee to generate one, no monthly charge, and no limit on how many you can create (though some issuers cap it at a few per day or per month). The card still earns the same rewards or cash back as your physical card.
Third-party virtual card services like Privacy.com charge differently. Some offer a free tier that lets you create a limited number of cards per month, with a paid plan for unlimited cards. Others charge a monthly subscription. Read the pricing page carefully before signing up, because costs vary widely.
Virtual cards have the same spending limits as your real card — you cannot spend more than your credit limit or account balance. Some issuers let you set a lower limit for individual virtual cards, which is useful if you are testing a new merchant or making a small purchase. Subscription services and recurring charges sometimes do not work with virtual cards, because the merchant needs a stable number that does not expire.
When to use a virtual card and when it does not matter
Use a virtual card when you are shopping at a new online store, a site with weak security, or a merchant you do not fully trust. Use one when you are signing up for a free trial and worried the company will charge you without permission — set the limit to $0 after the trial ends, and the card will decline any unauthorized charge. Use one for one-time purchases from unfamiliar merchants, especially international sites.
You do not need a virtual card for established, well-known retailers like Amazon, Target, or Walmart. You do not need one for your regular subscriptions (streaming services, gyms, software) because the merchant needs a stable number. You do not need one for in-person shopping, because virtual cards do not work at physical checkout. You do not need one if you are already using a digital wallet like Apple Pay, which provides similar protection.
Virtual cards are most useful when the risk is real but not catastrophic — a new online store, a site you found through an ad, a marketplace seller you have never bought from before. They are less useful when the risk is low (major retailers) or when the merchant needs a permanent card number (subscriptions).
Frequently Asked Questions
Do I need to pay for a virtual card?
Virtual cards from your bank or credit card company are free. Third-party services like Privacy.com may charge a monthly fee or limit free usage. Check your card issuer's app first — most major banks and card companies offer virtual cards at no cost.
Can I use a virtual card for subscriptions?
Most subscription services require a card number that does not change, so virtual cards that expire or refresh can cause problems. Some subscriptions will work if you set the virtual card to never expire, but it is safer to use your real card for recurring charges and virtual cards only for one-time purchases.
What happens if a merchant charges me twice?
The charge appears on your real card statement under the virtual card number you provided. You report the duplicate charge to your card issuer the same way you would report any other error, and they investigate and reverse it if it was unauthorized.
Can I use a virtual card at a physical store?
No. Virtual cards work only for online purchases and some in-app transactions. For in-person shopping, use your physical card or a digital wallet like Apple Pay or Google Pay.
What if the merchant rejects my virtual card?
Some merchants have systems that reject virtual card numbers, especially if they verify your address or require a stable card number for recurring charges. If a virtual card is declined, use your physical card instead. You can also contact the merchant's customer service to ask whether they accept virtual cards.