What a virtual credit card is and how it works
A virtual credit card is a temporary card number tied to your real credit account. Instead of using your actual card number online, you generate a unique number that works only once or for a single merchant. When the transaction completes or the card expires, that number becomes useless — even if someone steals it.
The process is straightforward. You log into your credit card issuer's app or website, request a virtual card number, and get a 16-digit number, expiration date, and CVV code just like a physical card. You enter this number at checkout instead of your real card. The charge still posts to your actual account and counts toward your credit limit, but the merchant never sees your real card number.
Virtual cards come from major issuers including Capital One, Citi, American Express, and Bank of America. Some smaller banks and credit unions offer them too. The feature is usually free if your card issuer provides it, though a few charge a small monthly fee — check your cardholder agreement or call the number on the back of your card to confirm.
Key Takeaways
- Virtual card numbers are temporary and tied to your real account, so a stolen number cannot be used to charge your full credit limit or access other accounts.
- You control when each virtual number expires — some last one transaction, others work for a set time or with a single merchant.
- Virtual cards work for online shopping, subscription services, and one-time purchases, but not for in-person transactions or ATM withdrawals.
- A virtual card does not change how your credit score is calculated or how your payment history is reported.
When a virtual card reduces your fraud risk
Virtual cards are most useful when you are buying from a merchant you do not fully trust or when you are making a one-time purchase from a new website. If the site is hacked or the merchant stores your number carelessly, the stolen number has an expiration date built in. The thief cannot use it again, and they cannot use it anywhere else.
Subscription services are another common use. Instead of giving Netflix or a gym your real card number, you generate a virtual number for that merchant only. If you later cancel the subscription and the company keeps charging you, you can dispute the charge knowing your real card number was never exposed to them. Some people generate a new virtual number each time they renew a subscription for this reason.
Virtual cards also protect you during a data breach at a retailer you trust. Target, Home Depot, and Equifax have all experienced breaches that exposed millions of card numbers. If you had used a virtual card for that purchase, the exposed number would be worthless to the thief.
How virtual cards differ from other fraud protections
Virtual cards are not the only way to protect yourself online. Credit card fraud protection — the legal right to dispute unauthorized charges — covers you whether you use a virtual card or your real number. Federal law caps your liability at $50 for unauthorized charges, and most issuers waive that fee entirely. If someone uses your real card number fraudulently, you report it and the charge is reversed.
The difference is that virtual cards prevent fraud before it happens, while fraud protection fixes it after. With a virtual card, the thief never gets a usable number in the first place. With fraud protection, you have to notice the charge, report it, and wait for an investigation. Virtual cards are the preventive approach; fraud protection is the safety net.
Virtual cards also differ from payment apps like Apple Pay or Google Pay, which encrypt your card number and send a token to the merchant instead. Payment apps protect your number during the transaction itself, but the merchant still receives a token tied to your account. Virtual cards go further by giving the merchant a number that expires or works only once.
Limitations and situations where virtual cards do not work
Virtual cards work only for online and phone purchases. You cannot use them at a physical store, gas pump, or ATM. If you need to pay in person, you have to use your physical card or another payment method.
Some merchants reject virtual cards because the card number and billing address do not match their records in the way they expect. This happens most often with subscription services that verify your card on file before charging you. If a virtual card is rejected, you can usually generate a new one or fall back to your physical card.
Virtual cards also do not help if you give out your information willingly to a scammer. If someone calls claiming to be from your bank and you read them your virtual card number, they can use it just as easily as your real number. The protection only works against data breaches and merchant negligence, not against social engineering or phishing.
How to set up a virtual card with your issuer
The exact steps depend on your card issuer, but the general process is the same. Log into your credit card's mobile app or website and look for a menu option labeled "Virtual Card," "Card Controls," "Digital Wallet," or "find Shopping." Some issuers put it under "Account Settings" or "Card Management."
Once you find the feature, you will see a button to generate a new virtual card number. Click it, and the app will show you a 16-digit number, expiration date, and CVV code. Some issuers let you set the card to expire after one transaction, after a set number of days, or when you manually delete it. Others generate a number that lasts until you turn it off.
Copy the number and use it at checkout just like you would your physical card. Keep the virtual card number in the app or a password manager, not in a text file or email. If you lose track of which virtual number you used for which merchant, your app usually shows a history of generated numbers and their status.
Virtual cards and your credit score
Using a virtual card does not affect your credit score or credit history. The charge still posts to your real account under your real card, so your payment history, credit utilization, and account age all remain the same. Credit bureaus see only your real card number and real account, not the virtual numbers you generate.
This means virtual cards are safe to use for credit-building purposes. If you are trying to build credit by keeping your utilization low or making on-time payments, using virtual cards instead of your physical card does not change how those actions are reported.
Virtual cards versus other security tools
Virtual cards work best as part of a broader security routine, not as your only protection. Combine them with a strong, unique password for each online account, two-factor authentication on accounts that offer it, and regular monitoring of your credit reports.
If you shop at the same merchants regularly — Amazon, your bank, your insurance company — you may not need a virtual card for every purchase. Reserve virtual cards for new merchants, one-time purchases, and services you are unsure about. For trusted, repeat merchants, your real card with fraud protection is usually sufficient.
You can also use virtual cards alongside a dedicated shopping credit card. Some people keep one card for everyday purchases and use virtual cards for online shopping, keeping their most frequently used card number out of circulation as much as possible.
Frequently Asked Questions
Can I use a virtual card for recurring charges like subscriptions?
Yes, but with a caveat. Most virtual cards work for subscriptions, but if you set the card to expire after one transaction, the subscription will fail on the next billing cycle. If you want a virtual card for a subscription you plan to keep, set it to expire after a set period (like one year) or manually, not after one use.
What happens if I dispute a charge made with a virtual card?
The dispute process is identical to a charge made with your physical card. You report the unauthorized charge to your issuer, they investigate, and the charge is reversed if fraud is confirmed. The fact that you used a virtual card number does not change your rights or the timeline.
If my virtual card number is stolen, can the thief use it?
Only if they use it before the card expires or before you manually delete it. Once the virtual card expires or you turn it off, the number is dead. This is the main advantage over your physical card number, which remains valid until you report it stolen.
Do all credit card issuers offer virtual cards?
No. Major issuers like Capital One, Citi, American Express, and Bank of America offer them, but smaller banks and credit unions may not. Check your issuer's app or website, or call the number on the back of your card to ask whether the feature is available on your account.
Can I use a virtual card to pay bills by mail or phone?
You can use a virtual card number over the phone, but not by mail. For phone payments, read the virtual card number to the representative just as you would your physical card. For mail, you would need to use your physical card or another payment method, since the merchant cannot process a card number they receive in the mail the same way they process one given over the phone.