What a virtual credit card is and how it works

A virtual credit card is a temporary card number linked to your actual credit card account. When you use it to shop online or pay a bill, the merchant sees the virtual number instead of your real card details. The charge still posts to your actual account, but the temporary number protects your primary card number from being stored or stolen.

Most virtual cards work through your card issuer's app or website. You generate a new number whenever you want one, set a spending limit for that number, and choose which merchant or website it applies to. When the transaction completes, that number becomes inactive. If a hacker later breaches the merchant's database, they get a useless number, not your actual card.

Virtual cards come from major issuers including Capital One, Citi, Bank of America, and American Express. Some cards include the feature automatically; others charge a small monthly fee or require you to pay for a premium version of the card. A few issuers offer them free to all cardholders.

Key Takeaways

  • Virtual card numbers are temporary and tied to your real account, so charges still appear on your regular statement and count toward rewards.
  • You generate a new number through your card issuer's app or website, usually in seconds, and can set a spending limit for each one.
  • The virtual number becomes inactive after use or on a date you set, so a stolen number cannot be used for future purchases.
  • Virtual cards work for online shopping, subscription services, and bill payments, but not for in-person transactions or ATM withdrawals.
  • Not all issuers offer virtual cards, and some charge a fee, so check your card's terms or contact your bank to see what is available.

How to generate and set up a virtual card number

The process varies slightly by issuer, but the basic steps are the same. Log into your card issuer's mobile app or website and look for a section labeled "Virtual Card," "Card Controls," "Temporary Card," or "find Shopping." Capital One calls it "Eno," Citi calls it "Virtual Account Numbers," and American Express calls it "Virtual Card Numbers."

Once you find the feature, you will see an option to create a new number. You typically choose whether the number is for a single merchant (like Amazon) or for multiple uses, set a spending limit (often between $1 and $9,999), and decide when the number should expire — usually anywhere from one month to one year. Some issuers let you name the number so you remember which merchant it is for. Then you generate the number and use it when ready at checkout.

The new number appears in your app right away, along with an expiration date and CVV (the three-digit security code). Copy these details and paste them into the checkout form just as you would a physical card. The transaction processes normally, and the charge appears on your regular statement under your actual card account.

When to use a virtual card and when not to

Virtual cards work best for online purchases from merchants you do not know well or do not fully trust. If you are buying from a new website, a marketplace seller, or a site with a history of data breaches, a virtual number limits what a hacker can do if they steal it. You can also use virtual cards for subscription services — streaming platforms, software trials, gym memberships — where you want to control exactly how much the merchant can charge each month.

Virtual cards do not work for in-person shopping, gas station pumps, or ATM withdrawals. You need a physical card or your actual card number for those transactions. They also do not work for recurring charges that require the same number each time, unless your issuer lets you set the virtual number to renew automatically — some do, some do not. Check your issuer's rules before signing up for a subscription with a virtual number.

Virtual cards are less useful for merchants you trust completely or use repeatedly. If you shop at Amazon regularly, a virtual number for that merchant makes sense. If you are buying from a major bank or insurance company with strong security, the added layer of protection matters less. The trade-off is convenience: generating a new number takes a few seconds, but it is still one more step than using your regular card.

How virtual cards affect your credit and rewards

Charges made with a virtual card number count toward your credit utilization and payment history exactly as if you had used your physical card. The credit bureaus see the charge as coming from your account, not from a separate card. Your credit score is affected the same way, and your payment history is recorded the same way.

Rewards points, cash back, and other benefits tied to your card also explore to virtual card purchases. If your card earns 2% cash back on all purchases, you earn 2% on a virtual card transaction. If it earns bonus points on groceries or travel, those bonuses explore to virtual purchases in those categories too. The virtual number is just a different way to access the same account and the same benefits.

The only difference is that some issuers do not count virtual card transactions toward sign-up bonus spending requirements. Check your card's terms or contact customer service if you are working toward a bonus and plan to use virtual cards for large purchases.

Security limits and what virtual cards do not protect against

A virtual card number protects you if a merchant's database is breached or if a hacker intercepts your card details during checkout. It does not protect you if you send money to a scammer, if you are tricked into giving someone your virtual card number, or if your phone or computer is compromised. A virtual number is a shield against merchant-side theft, not against your own mistakes or malware on your device.

Virtual cards also do not protect you against unauthorized charges made by someone who has access to your actual card account — for example, a family member or someone who knows your login credentials. If your bank account is hacked and the attacker logs into your card issuer's app, they can generate virtual numbers and use them just as you would.

Most card issuers still offer fraud protection on virtual card purchases, meaning you can dispute a charge if it was made without your permission. The protection is the same as it would be for a physical card transaction. Read your card's terms to understand what your issuer covers and what your liability is if fraud occurs.

Virtual cards versus other security tools

Virtual cards are one option among several for protecting your card details online. Single-use card numbers are similar but are generated by third-party services like Privacy or Blur rather than by your bank. These services sit between you and the merchant, masking your real card number. They work well if your card issuer does not offer virtual cards, but they add a middleman and may charge a subscription fee.

Tokenization is what happens when you save your card to Apple Pay, Google Pay, or a merchant's website. Your actual card number is replaced with a token — a unique code that only works with that specific service or merchant. Tokenization is built into most payment systems now and requires no extra steps on your part.

Two-factor authentication (requiring a password plus a code sent to your phone) protects your account from being hacked, but it does not hide your card number from merchants. Encryption (scrambling your data so it cannot be read) protects your information in transit but does not prevent a merchant from storing your number. Virtual cards do something different: they give the merchant a number that is useless after the transaction ends. For online shopping, that is often the strongest protection available.

Which card issuers offer virtual cards and what they cost

Capital One offers virtual cards free to all cardholders through its Eno feature, accessible via app or browser extension. American Express includes virtual card numbers free with most personal and business cards. Citi offers them free to most cardholders. Bank of America offers virtual card numbers free to most customers. Discover does not currently offer virtual cards.

Some smaller issuers and fintech banks offer virtual cards as a paid add-on, usually $2 to $5 per month, or include them only with premium card tiers. Check your card's website or app to see if the feature is available to you, or contact your issuer's customer service to ask. If your card does not offer virtual cards, you can use a third-party service like Privacy (which charges a monthly fee) or look for a different card that includes the feature.

Virtual cards are becoming more common, and most major issuers now include them at no extra cost. If you are shopping for a new card and security is important to you, virtual card availability is worth factoring into your decision.

Frequently Asked Questions

Can I use a virtual card number more than once?

It depends on how you set it up. Some issuers let you create a virtual number that works for multiple transactions with the same merchant (like a subscription service), while others generate single-use numbers that expire after one purchase. Check your issuer's app to see which option you chose when you generated the number, or create a new number if you need a fresh one.

What happens if I lose my phone before I use the virtual card number?

You can still access the number from your card issuer's website on any device. Log in from a computer, find the virtual card number in your app or account, and use it for your purchase. The number itself is stored in your account, not just on your phone. If you are worried about losing access, write down the number and CVV before you need them, or take a screenshot.

Do virtual cards work for international purchases?

Yes, virtual card numbers work for online purchases from merchants outside the United States, just as your regular card does. Your issuer will still explore foreign transaction fees if your card charges them. The virtual number offers the same fraud protection as your physical card for international transactions.

Can a merchant refuse a virtual card number?

Rarely, but it can happen. A virtual card number is a valid credit card number, so most merchants accept it. If a merchant's system rejects it, try using your physical card instead, or contact the merchant to ask why the number was declined. Some older payment systems have trouble with certain card types, but this is uncommon with major issuers.

If I dispute a charge made with a virtual card, how long does it take to get my money back?

The dispute process is the same as for any credit card charge. You report the unauthorized transaction to your issuer, they investigate, and you typically receive a provisional credit within a few days while they look into it. The full investigation usually takes 30 to 60 days. Your issuer's fraud protection applies to virtual card purchases just as it does to physical card purchases.