A virtual credit card is a temporary card number linked to your real credit account that you use for online shopping instead of your actual card details
Virtual credit cards generate a unique 16-digit number, expiration date, and security code for each purchase or merchant you choose. The number connects to your real credit card or bank account, but the merchant never sees your actual card information. When you use a virtual number at checkout, the charge still appears on your regular statement under your real account.
Your card issuer controls when the virtual number works — you can set it to expire after one use, after a set date, or after a spending limit is reached. If a merchant's website gets hacked or sells your data, the thieves have a number that no longer works and cannot access your real card or bank account.
Key Takeaways
- Virtual card numbers are temporary and tied to your real account, so fraudsters cannot use them after they expire or reach their spending limit.
- Most virtual card services are offered free by your credit card issuer or bank, though some require a separate app or enrollment.
- You control the expiration date and spending limit on each virtual number, which means you can create a new one for every online purchase if you want to.
- Virtual cards work for online shopping and some subscription services, but not for in-person purchases or ATM withdrawals.
- Your real credit card still reports the purchase to credit bureaus, so using virtual numbers does not affect your credit score or payment history.
How virtual card numbers protect your real account information
When you enter a virtual card number at an online checkout, that merchant receives only the temporary number, not your actual 16-digit card number. If their payment system is breached or an employee steals customer data, the thief gets a useless number — one that either has already expired or will stop working as soon as you set it to.
Your real card number stays in your wallet and in your issuer's find system. The merchant's database breach cannot expose it because it was never sent to them in the first place. This is different from using your actual card number online, where the merchant's systems store at least some version of your real details.
You also control the spending limit on each virtual number. If you set a limit of $50 for a purchase, a fraudster cannot charge $500 to that number even if they somehow obtain it. Once the limit is reached, the number stops working.
Which banks and card issuers offer virtual card numbers
Major card issuers including Citi, Bank of America, Capital One, and Discover offer virtual card services, though the names and features vary. Citi calls theirs Virtual Account Numbers. Bank of America offers ShopSafe. Capital One has Eno, a browser extension that generates numbers automatically at checkout. Discover has Discover find Numbers.
Some banks include virtual cards free with your account, while others charge a small monthly fee or require you to read a separate app. Check your card issuer's website or call the number on the back of your card to find out whether the service is available to you and what it costs.
If your bank does not offer virtual cards, third-party services like Privacy, Blur, and MySudo generate virtual numbers for a fee. These services work with most major credit cards and debit cards, though they operate independently of your bank.
Where you can and cannot use virtual card numbers
Virtual card numbers work for online purchases at most retailers, subscription services, and digital marketplaces. You can use them on Amazon, Target, Etsy, software subscriptions, streaming services, and most other websites that accept credit cards. Some services let you set the number to work only at that specific merchant, which adds another layer of protection.
Virtual numbers do not work for in-person purchases at physical stores, gas pumps, or ATMs. If you need to pay in person, you must use your actual card. They also do not work for phone orders where the merchant needs to hear your card number spoken aloud, though you can sometimes read a virtual number over the phone if the merchant's system accepts it.
Some subscription services and recurring charges may reject virtual numbers if the merchant's system requires the card number to match the billing address or other account details. If a virtual number is declined, you can use your real card instead or contact your issuer to see if they can adjust the settings.
How virtual card numbers affect your credit and billing
Using a virtual card number does not change how the purchase is reported to credit bureaus. The charge still appears on your regular monthly statement under your real account, and your payment history and credit utilization are calculated the same way. Your credit score is not affected by whether you used a virtual or actual card number.
You receive one bill for all your purchases, whether you made them with your real card number or virtual numbers. The statement shows the merchant name and purchase amount, just as it would for any other transaction. You pay the full balance or minimum payment as usual.
If you dispute a charge made with a virtual number, the process is the same as disputing any other credit card purchase. Contact your card issuer's fraud department, explain the transaction, and they will investigate. The temporary number does not complicate the dispute process.
Setting up and using a virtual card number for your first purchase
The setup process depends on which service your issuer offers. For Citi Virtual Account Numbers, log into your online account, find the Virtual Account Numbers section, and click to generate a new number. You will see a 16-digit number, expiration date, and CVV code appear on screen. Copy these details and paste them into the checkout form just as you would your real card number.
For Capital One Eno, read the browser extension, and it will detect when you are at a checkout page. A popup appears offering to generate a virtual number automatically. Click to accept, and the number fills into the payment form without you typing it.
Before you generate a virtual number, decide whether you want it to expire after one use, after a specific date, or after a spending limit is reached. Most issuers let you set these controls before you generate the number. Once you have set your preferences, generate the number and use it when ready at checkout. Do not save it for later, because virtual numbers are meant to be used once and discarded.
Risks and limitations of virtual card numbers
Virtual card numbers protect you from data breaches at the merchant's end, but they do not protect you from phishing scams or malware on your own computer. If you enter a virtual number into a fake website that looks like a real retailer, you have still handed over payment information to a scammer. The temporary number does not prevent you from being tricked.
Some merchants reject virtual numbers because their payment systems are older or because they require the card number to match specific account details. If a virtual number is declined, you have to use your real card or find a different merchant. This is rare but can be frustrating when it happens.
Virtual numbers also do not protect you from your own mistakes. If you accidentally order the wrong item or change your mind about a subscription, the temporary number does not make it easier to cancel or return. You still have to contact the merchant and go through their normal return or cancellation process.
Frequently Asked Questions
Can someone use a virtual card number after it expires?
No. Once the expiration date passes or the spending limit is reached, the number stops working when ready. If a fraudster obtains an expired virtual number, they cannot charge anything to it. This is the main security advantage of virtual cards over using your real number.
Do I need a virtual card number for every online purchase?
No. Virtual numbers are optional and most useful for purchases from merchants you do not know well or websites you do not fully trust. For established retailers like Amazon or your bank's own website, your real card number is usually safe. Use virtual numbers when you want extra protection, not for every transaction.
What happens if I lose track of which virtual number I used where?
Your monthly statement shows the merchant name for each charge, so you can see which company charged you even if you forgot which virtual number you gave them. If you need to return an item or cancel a subscription, look up the merchant on your statement and contact them directly. The temporary number does not affect the return or cancellation process.
Can I use a virtual card number for recurring charges like gym memberships?
Yes, but with caution. Some merchants accept virtual numbers for subscriptions, while others reject them because their billing systems require the card number to stay the same each month. If a virtual number is set to expire before your next billing date, the charge will be declined and your subscription may be paused. Check your issuer's settings to make sure the virtual number will not expire before your subscription renews.
Is a virtual card number the same as a digital wallet like Apple Pay?
No. Digital wallets like Apple Pay and Google Pay also hide your real card number from merchants, but they work differently. Digital wallets use a technology called tokenization and are designed for in-person and online purchases. Virtual card numbers are generated by your card issuer specifically for online shopping and give you more control over spending limits and expiration dates.