What a virtual credit card is and how it works
A virtual credit card is a temporary card number linked to your real credit card account. When you use it to shop online, the merchant sees the virtual number instead of your actual card number. If that virtual number is stolen or breached, the thief cannot use it again — the number works only for the specific purchase you created it for, or expires after a set time.
Virtual cards are generated through your card issuer's app or website. You pick a spending limit, an expiration date, and sometimes a merchant category or specific merchant name. The virtual number charges to your real account, but the merchant never learns your actual card details. This layer of separation reduces fraud risk without changing how you pay.
Not all card issuers offer virtual cards. The major ones that do include Capital One, Citi, American Express, Bank of America, and Discover. Some smaller banks and fintech companies offer them as well. If your issuer does not provide them, you cannot generate a virtual number through your regular account.
Key Takeaways
- Virtual card numbers are generated through your card issuer's app or website, not through a separate service or company.
- You control the spending limit, expiration date, and sometimes the merchant category for each virtual number you create.
- The virtual number is tied to your real account and charges appear on your regular statement under your actual card.
- Virtual cards work best for one-time purchases, subscriptions you plan to cancel, and merchants you do not fully trust.
- If your card issuer does not offer virtual cards, you cannot use this feature even if you want to — the option must be built into their system.
How to set up a virtual card through your issuer
Log into your card issuer's mobile app or website and look for a section called "Virtual Cards," "Digital Wallet," "Card Controls," or "Manage Cards." The exact name varies by bank. Once you find it, you will see an option to create a new virtual number. Tap or click it.
You will be asked to set a spending limit for that virtual number. This is the maximum amount the number can charge. You will also set an expiration date — this can be as short as a few hours or as long as several years, depending on the issuer. Some issuers let you name the virtual card or assign it to a merchant category (like "groceries" or "streaming services") so you can track what it is for.
Once you confirm, the issuer generates a new card number, expiration date, and CVV code. Copy these details and use them at checkout just as you would your physical card. The transaction posts to your regular account, and you see it on your normal statement.
If you want to stop using a virtual number before it expires, you can delete it from the app. Any pending charges will still go through, but new charges cannot be made with that number.
Which card issuers offer virtual cards
Capital One, Citi, American Express, Bank of America, and Discover all offer virtual card numbers to their cardholders. Some regional banks and credit unions do as well, though the feature is less common outside the major issuers. Check your card issuer's app or website to see if the option appears in your account menu.
If your issuer does not offer virtual cards, you have no way to generate one through them. Some third-party services claim to create virtual numbers for any card, but these typically work differently — they act as a middleman between you and the merchant, which introduces its own risks and does not provide the same fraud protection as an issuer-backed virtual card.
Virtual card availability can also depend on your card type. Some issuers offer the feature only to premium cardholders or only on certain product lines. Log into your account to confirm whether the option is available to you.
When to use a virtual card instead of your real number
Use a virtual card for one-time purchases from merchants you do not shop with regularly. If you are buying something once from a website you found through a search result, a virtual number protects you if that site is hacked or sells your data later.
Virtual cards are also useful for subscriptions you plan to cancel. Create a virtual number with an expiration date that matches when you want the subscription to end. When the number expires, the merchant cannot charge you again without your creating a new virtual number — this prevents accidental recurring charges.
Use a virtual card when you are unsure about a merchant's security practices. Smaller retailers, international sites, or merchants with poor reviews are good candidates. The virtual number limits what a thief can do if the site is compromised.
For regular purchases from trusted merchants — your grocery store, your phone company, your bank — your physical card or a saved payment method is fine. Virtual cards add a step without much benefit if you trust the merchant and monitor your account regularly.
How virtual cards affect your credit and rewards
Virtual card numbers charge to your real account, so they count toward your credit utilization and payment history just like any other purchase. If you create a virtual card and use it, the charge appears on your statement under your actual card. Your credit report sees the transaction as coming from your real card, not a separate account.
Rewards points or cash back earned on the purchase go to your real card account. You do not earn rewards twice or lose them because you used a virtual number. The rewards structure is identical to paying with your physical card.
Virtual cards do not affect your credit score beyond the normal impact of the purchase itself. Creating a virtual number does not trigger a hard inquiry, does not open a new account, and does not change your available credit. The virtual number is simply a mask for your real card.
Security limits of virtual cards
Virtual cards protect you if a merchant's database is breached or if a website stores your card details and those details are later stolen. The thief gets a number that either has already expired or has a spending limit too low to be useful. They cannot use it at a different merchant or increase the limit.
Virtual cards do not protect you if you are tricked into giving your information to a scammer directly. If someone calls you pretending to be your bank and you read them a virtual card number, they can use it just as easily as they could use your real number. Virtual cards also do not prevent unauthorized charges if your account is compromised — if a hacker gains access to your card issuer's app, they can create virtual numbers themselves.
Virtual cards are one layer of fraud protection, not a complete solution. They work best alongside other practices: monitoring your account regularly, using strong passwords, enabling two-factor authentication on your card issuer's app, and reporting suspicious activity quickly.
Alternatives if your issuer does not offer virtual cards
If your card issuer does not provide virtual cards, you have limited options. Some third-party services like Privacy.com or Blur generate virtual numbers that work with most cards, but they act as a middleman — the merchant sees the third-party service's details, not your card's details. This adds complexity and introduces a new company into your payment chain.
Another option is to use a digital wallet like Apple Pay, Google Pay, or Samsung Pay. These do not create a new card number, but they do prevent the merchant from seeing your full card details. The merchant sees a tokenized version instead. This is less protective than a true virtual card but more convenient than entering your number manually.
If neither option appeals to you, the simplest approach is to monitor your account closely and report fraud quickly. Many card issuers offer zero-liability protection, meaning you are not responsible for unauthorized charges if you report them promptly. This is not as good as preventing the breach in the first place, but it is a real safety net.
Frequently Asked Questions
Can I use a virtual card number at a physical store?
No. Virtual card numbers work only for online purchases and phone orders where you enter the number manually. You cannot use them at a checkout counter or ATM because the merchant cannot process a number without an expiration date and CVV that match a physical card.
What happens if I create a virtual card and never use it?
Nothing. The number sits in your account until it expires on the date you set. It does not charge you, does not affect your credit, and does not expire your real card. You can delete it anytime from your app.
Can I change the spending limit on a virtual card after I create it?
This depends on your issuer. Some allow you to edit the limit before the first charge goes through; others do not. Check your app to see if an edit option appears. If you cannot change it, you can delete the card and create a new one with a different limit.
Do virtual cards work internationally?
Yes, virtual cards work the same way abroad as they do domestically. The merchant sees the virtual number, not your real card, regardless of where they are located. Currency conversion and foreign transaction fees (if your card has them) still apply.
What if a merchant declines my virtual card number?
Some older payment systems or merchants with strict fraud filters may reject virtual numbers. If this happens, use your physical card instead. You can also contact the merchant's customer service to ask if they accept virtual card numbers — some do not process them due to technical limitations.