A virtual credit card is a temporary card number linked to your real account that you use for online purchases instead of your actual card details
Virtual credit cards generate a unique card number, expiration date, and sometimes a different CVV for each transaction or merchant. The charges still post to your real account, but the merchant never sees your actual card number. If that temporary number gets stolen or sold on the dark web, it cannot be used anywhere else — it only works at the place you created it for, or expires after a set time.
They are not a separate account or a different card in the mail. They are a privacy layer between you and the websites where you shop. Your bank or card issuer controls whether the number works again, and can shut it down instantly if something looks wrong.
Key Takeaways
- Virtual card numbers work only at the merchant you created them for, or expire after a set period, so a stolen number cannot be used for fraud elsewhere.
- Your real card number stays hidden from online merchants, reducing the risk that your full details end up in a data breach.
- Most virtual card services are built into your bank's app or a separate app you download — you generate a new number in seconds before you check out.
- Virtual cards do not protect you from chargebacks or disputes; you still have the same protections as a regular credit card purchase.
- Not all merchants accept virtual card numbers, particularly subscription services and some international retailers that flag them as high-risk.
How virtual cards are created and used
The process depends on your bank or card issuer. Some banks, like Citi and Capital One, offer virtual card numbers through their mobile app. You open the app, select the card you want to use, and tap a button to generate a new number. Within seconds you have a card number, expiration date, and CVV ready to paste into a checkout form.
Other banks partner with third-party services. Discover, for example, works with Parity to offer virtual numbers. American Express cardholders can use ShopSafe, a tool that generates numbers directly in their account. If your bank does not offer virtual cards natively, you can also use standalone apps like Privacy.com or Blur, which create virtual numbers that pull from a linked bank account or prepaid balance.
Once you have the number, you enter it at checkout just like a regular card. The merchant processes the payment, but the number itself is useless after that transaction or after the expiration date you set — usually 30 days to one year depending on the service.
What virtual cards protect you from
Virtual cards reduce your exposure in a data breach. If a retailer's database is hacked and card numbers are stolen, the thieves get a number that only works at that one store, or one that has already expired. They cannot use it to buy plane tickets, open new accounts, or drain your bank account. The merchant breach becomes a much smaller problem.
They also let you avoid giving your real card number to merchants you do not fully trust. If you are buying from a small international site, a marketplace seller, or a retailer with a spotty security record, a virtual number means your actual card details never reach their servers.
Virtual cards do not, however, protect you from the merchant itself. If you order something and it never arrives, or you are charged twice by mistake, you still file a dispute the same way you would with a regular card. The virtual number does not change your chargeback rights or your bank's fraud investigation process.
Limitations and merchants that reject virtual numbers
Some merchants flag virtual card numbers as high-risk and decline them outright. Subscription services are the most common problem — Netflix, Spotify, and many others reject virtual numbers because they need a stable card number to charge you monthly. If the number expires or changes, the subscription breaks.
Airlines sometimes decline virtual numbers at checkout, though this is less common than it used to be. International merchants, particularly in countries with strict payment verification rules, may also reject them. Gas pumps and some toll systems do not accept virtual numbers because they require the card to be physically present or verified in a specific way.
If a virtual number is declined, you have two options: use your real card number instead, or contact the merchant's support to ask if they accept virtual cards. Some will work with you if you call; others simply do not support them.
Virtual cards versus other privacy tools
Virtual cards are different from a few other privacy and security tools you might use online. A VPN hides your location and IP address but does not hide your card number from the merchant. Two-factor authentication protects your account login but does not protect your card details during checkout. A password manager stores your card information securely but still lets you enter your real number at checkout.
Virtual cards sit in a different category: they hide the card number itself from the merchant. You can and should use them alongside these other tools. A virtual card number plus two-factor authentication plus a strong password is better than any one of them alone.
Virtual cards are also different from a prepaid card. A prepaid card is a separate account you load money into; a virtual card is a temporary number tied to your existing credit or bank account. Prepaid cards do not build credit history. Virtual cards do, because the charges post to your real account.
Costs and whether virtual cards are worth it
Most virtual card services offered by banks are free. Citi, Capital One, Discover, and American Express do not charge for virtual numbers. If your bank does not offer them, third-party apps like Privacy.com and Blur offer free tiers with limits on how many numbers you can generate per month, and paid tiers that remove those limits.
The real cost is time and friction. Generating a virtual number takes 30 seconds, but you have to do it every time you shop online if you want maximum privacy. For frequent shoppers, that adds up. Many people use virtual cards selectively — for new merchants, for one-time purchases, or for sites they do not fully trust — rather than for every single transaction.
Whether they are worth it depends on how much you value privacy and how often you shop online. If you make one purchase a month from a trusted retailer, virtual cards probably do not change your life. If you shop frequently from different merchants or you are concerned about data breaches, they are a low-friction way to reduce your risk.
How to set up virtual cards with your bank
Start by checking whether your bank or card issuer offers virtual cards. Visit their website or open their mobile app and search for "virtual card," "virtual number," or "card controls." If you see an option, the setup is usually automatic — you just log in and generate a number when you need one.
If your bank does not offer virtual cards, you can download a third-party app. Privacy.com and Blur both work with most U.S. bank accounts and debit cards. You link your account or card to the app, set a spending limit if you want one, and generate a virtual number. The number pulls from your linked account when you use it.
Some card issuers also offer card controls or spending rules that let you pause your card, set purchase limits, or block certain types of merchants — features that work alongside virtual cards to give you more control over your account.
Frequently Asked Questions
Can someone use a virtual card number if they see it on my screen?
Not if the number is set to work only at one merchant or has already expired. If you are using a virtual number that is still active and not locked to a specific store, someone who sees it could theoretically use it — but most virtual card services let you pause or delete a number instantly if you think it has been compromised.
Do virtual cards work with PayPal or Apple Pay?
Some do, some do not. PayPal accepts virtual card numbers from most banks. Apple Pay and Google Pay typically do not accept virtual card numbers because they require the card to be verified in a specific way. Check your bank's documentation or contact support to confirm what works with the services you use.
Will using a virtual card hurt my credit score?
No. Virtual card charges post to your real account and are reported to credit bureaus the same way regular charges are. Your credit utilization, payment history, and account age are all calculated the same way whether you used a virtual number or your real card number.
What happens if I dispute a charge made with a virtual card?
You file a dispute through your bank or card issuer the same way you would for any other charge. The virtual number does not change the dispute process. Your bank investigates and either reverses the charge or sides with the merchant, just as they would with a regular card transaction.
Can I use a virtual card for in-person purchases?
No. Virtual card numbers only work online or over the phone. They do not work at physical stores, gas pumps, or ATMs because those require the card to be physically present or verified in a way that virtual numbers cannot support.