A virtual credit card is a temporary card number linked to your real account that you use online instead of your actual card details
When you create a virtual card, your bank or card issuer generates a unique 16-digit number, expiration date, and CVV code. This number connects to your real credit card account but is not the card number printed on your physical card. You enter the virtual number at checkout just as you would a regular card number. The charge posts to your actual account, but the merchant never sees your real card details.
Virtual cards work through your bank's app or website. You request a new virtual number, set a spending limit and expiration date if you want to, and use it when ready. Some virtual cards expire after one transaction; others last for months. The key difference from your physical card is that each virtual number is a one-time or limited-use shield between your real account and the merchant.
Key Takeaways
- A virtual card number is generated by your bank and linked to your real account, but merchants see only the temporary number, not your actual card details.
- You control the spending limit and expiration date of each virtual card, so you can set a card to expire after one purchase or to work for a specific time period.
- Virtual cards reduce the risk of fraud because a stolen virtual number cannot be used to charge your account once that card expires or its limit is reached.
- Not all banks offer virtual cards, and those that do may charge a fee or include the feature only with premium account tiers.
- Virtual cards work for online purchases but not at physical stores, gas pumps, or ATMs where you need to insert or tap a physical card.
How the transaction flows from merchant to your bank
When you enter a virtual card number at an online checkout, the payment processor routes it to your bank just as it would a regular card number. Your bank recognizes the virtual number as belonging to your account and approves or declines the charge based on your balance and credit limit. The merchant receives a confirmation that the payment went through, but their system records only the virtual number, not your real card number.
The merchant never learns your actual card details. If that merchant's database is later breached, a thief gains access only to the virtual number you used for that one transaction. That number is either already expired or has a spending limit so low that it cannot be used for a second charge. Your real card number stays protected in your bank's system.
Setting limits and expiration dates on virtual cards
Most banks that offer virtual cards let you set a spending cap before you use the number. You might create a card with a $50 limit for a one-time purchase, or a $500 limit for a subscription service you plan to use for three months. Once the limit is reached, the card declines any further charges, even if the merchant tries to charge it again.
You also control when the card expires. Some virtual cards are set to expire after a single transaction automatically. Others let you choose an expiration date — for example, a card that works only through the end of the month, or only for the next 90 days. After expiration, the number no longer works, and the merchant cannot use it to charge you without your permission.
Which banks and card issuers offer virtual cards
Virtual card programs vary widely by bank. Citi, Bank of America, Capital One, and Discover offer virtual card features to some customers. American Express offers a similar service called ShopSafe to cardholders. Some smaller banks and credit unions do not offer virtual cards at all, so check your bank's app or website to see if the feature is available on your account.
Some banks include virtual cards for all customers at no extra cost. Others offer the feature only to premium account holders or charge a monthly fee. A few banks limit the number of virtual cards you can create per month. Before you rely on virtual cards for regular purchases, confirm what your bank offers and whether there are any restrictions or costs.
Virtual cards versus other fraud protection methods
Virtual cards are one layer of fraud protection, but they work differently from other tools. A fraud alert or credit freeze prevents someone from opening a new account in your name, but it does not stop a merchant's database breach from exposing your card number. A virtual card stops that breach from being useful because the stolen number has already expired or has a limit too low to matter.
Virtual cards also differ from purchase protection or chargeback rights. Those tools let you dispute a charge after it happens. A virtual card prevents the charge from going through in the first place by limiting what the merchant can do with the number you gave them. Using both — a virtual card for the transaction and chargeback rights as a backup — gives you more protection than either alone.
When virtual cards do not work
Virtual cards work only for online purchases where you enter the card number manually or through a digital wallet. You cannot use a virtual card at a physical store, gas pump, or ATM because those locations require you to insert or tap a physical card. If a merchant's website requires you to enter a billing address that matches your account on file, a virtual card may not work because the address on the virtual card is not the same as your real card.
Some subscription services and recurring charges also reject virtual cards because the merchant's system expects the same card number for each monthly charge. If you create a new virtual card for each charge, the merchant may flag it as fraud or cancel your subscription. Check the merchant's payment settings before using a virtual card for a recurring charge, or use a virtual card with a long expiration date so the same number works for multiple months.
How to create and manage virtual cards
The process differs by bank, but most follow the same basic steps. Open your bank's mobile app or website and look for a section called "Virtual Cards," "Card Controls," or "Digital Wallet." Click the option to create a new virtual card. You will be asked to set a spending limit and expiration date, and to choose which of your accounts the card should link to if you have multiple cards.
Once you create the virtual card, the number appears on your screen when ready. Copy it and use it at checkout. Most banks let you view all your active virtual cards in one place, see which merchants have charged each card, and delete or deactivate a card before its expiration date if you no longer need it. Some banks also send you a notification each time a virtual card is charged, so you can spot unauthorized use quickly.
Frequently Asked Questions
If a virtual card number is stolen, can someone use it after it expires?
No. Once a virtual card expires, the number no longer works, even if a thief has it. The merchant's system will decline any charge attempt. This is why setting a short expiration date — such as one transaction or one month — limits the window of time a stolen number could be misused.
Do virtual cards hurt my credit score?
Virtual cards are linked to your real account, so charges appear on your credit report just as they would if you used your physical card. The virtual number itself does not affect your score. Your payment history, credit utilization, and account age are what matter to credit bureaus, not whether you used a virtual or physical card number.
Can I use a virtual card to make a purchase and then dispute it?
Yes. A virtual card number is still connected to your account, so you have the same chargeback and dispute rights as you would with your physical card. If a merchant charges you incorrectly or does not deliver what you ordered, you can contact your bank and dispute the charge, regardless of whether you used a virtual or real card number.
What happens if I set a spending limit too low?
The card will decline any charge above the limit you set. If you create a $25 virtual card and the purchase is $30, the transaction fails at checkout. You can delete that card and create a new one with a higher limit, or contact your bank to increase the limit on an existing card if your bank allows it.
Do I need a separate app to use virtual cards?
No. Virtual cards are managed through your bank's regular app or website. You do not need to read anything extra. When you create a virtual card, the number appears in your bank's app, and you copy it to use at checkout just as you would look up a regular card number.