What a virtual credit card is and how it works

A virtual credit card is a temporary card number that your credit card issuer generates for you to use online. It connects to your real credit card account, but the number itself is different — and you can set it to expire, lock it to a single merchant, or limit how much money it can charge. When you use the virtual number at checkout, the charge still goes to your actual card and your regular billing address, but the merchant never sees your real card number.

The virtual number acts as a shield between your actual card and the website you're shopping on. If that website gets hacked or sells your information, the thieves have a number that either doesn't work anymore or only works at one store for one purchase. Your real card number stays private.

Virtual cards are offered by most major issuers — American Express, Visa, Mastercard, and Discover all have versions. Some banks and credit unions offer them too. The service is usually free if your card issuer provides it, though a few charge a small monthly fee.

Key Takeaways

  • Virtual card numbers are generated by your card issuer and tied to your real account, but you control when they expire and which merchant can use them.
  • You create a virtual number through your card issuer's app or website, then use it at checkout just like a regular card number.
  • Virtual cards protect your real card number from being stolen or sold, but they do not protect you from your own mistakes — like entering the wrong amount.
  • Most virtual card services let you set spending limits, lock a number to one merchant, or make a number expire after one use.
  • Virtual cards work for online purchases and subscriptions, but not for in-person shopping, ATM withdrawals, or phone orders where the merchant needs to hear your voice.

Where to find and set up virtual cards with your issuer

The first step is to check whether your card issuer offers virtual numbers. Log into your credit card's app or website and look for a menu item like "Virtual Card," "Card Controls," "Digital Wallet," or "find Shopping." The exact name varies by issuer.

If you have an American Express card, the service is called American Express Digital find Numbers. Visa calls theirs Visa Click to Pay or offers it through individual bank apps. Mastercard's version is Mastercard Digital Enablement Service, though you usually access it through your bank's app rather than directly from Mastercard. Discover offers virtual numbers through its app as well.

Once you find the feature, you will typically see a button to generate a new virtual number. The issuer will ask you to confirm which account you want the number tied to, then create the number when ready. You can usually generate as many as you need — there is no limit on how many virtual numbers one real card can have at once.

Some issuers let you name each virtual number (for example, "Netflix" or "Amazon") so you remember which merchant it is for. This makes it easier to track which number to use when you need to update a subscription or make a return.

How to use a virtual number at an online checkout

Using a virtual card number is identical to using your real card number — the merchant's checkout page will not know the difference. When you reach the payment screen, enter the virtual card number in the card number field, then fill in the expiration date and CVV (the three-digit security code) exactly as they appear in your card issuer's app.

The billing address and name should match what your card issuer has on file for your real account. If you enter a different address or name, the payment may be declined. Some issuers let you set a custom billing address for a specific virtual number, but most require you to use your registered address.

After you submit the payment, the charge will appear on your regular credit card statement under your real card's last four digits, not the virtual number. You will see the merchant's name and the amount, just as you would with any other purchase. The virtual number itself is only visible in your card issuer's app.

Setting limits and controls on individual virtual numbers

Most card issuers let you customize how each virtual number behaves. The most common controls are a spending cap, a merchant lock, and an expiration date.

A spending cap means you set a maximum dollar amount that the virtual number can charge. If you create a number for a $15 monthly subscription, you can cap it at $20 to protect yourself if the price goes up or if there is an accidental double charge. Once the cap is reached, the number will decline any further charges.

A merchant lock restricts the virtual number so it only works at one specific store or website. If you create a number for Amazon, it will be rejected if someone tries to use it at Target or anywhere else. This is the strongest protection against fraud, because even if a thief gets the number, they cannot use it anywhere but that one merchant.

An expiration date can be set to one-time use (the number works for a single purchase and then stops working), a specific date, or a rolling expiration (for example, 12 months from now). One-time numbers are useful for one-off purchases from unfamiliar websites. Rolling expiration dates are better for subscriptions, because the number will keep working until you decide to turn it off.

You can change or turn off these controls anytime through your card issuer's app. If you want to stop a subscription, you can either delete the virtual number or set its expiration date to today.

What virtual cards protect you from and what they do not

Virtual cards protect you from data breaches — if the website you shop on gets hacked, the thieves get a number that either does not work or only works at that one store. They cannot use it to shop elsewhere or to drain your bank account. Virtual cards also protect you from merchant fraud, where a store intentionally charges your card more than you authorized or sells your card number to other merchants.

Virtual cards do not protect you from your own mistakes. If you enter the wrong amount at checkout, the charge still goes through. If you accidentally authorize a subscription you did not want, the virtual number will still process it. If you send your virtual number to a scammer who asks for it, they can use it just like anyone else. Virtual cards are a tool for protecting your real card number, not for protecting you from making bad decisions.

Virtual cards also do not work for every type of purchase. You cannot use them at a physical store, at an ATM, or over the phone when the merchant needs to hear your voice read the number. They work only for online transactions where you can type the number into a form.

Virtual cards versus other security tools

Virtual cards are one layer of protection, but they work best alongside other tools. A strong, unique password for each online account prevents someone from logging into your account and changing the payment method. Two-factor authentication (a code sent to your phone or generated by an app) adds a second barrier even if your password is stolen. Purchase alerts from your card issuer notify you by text or email whenever a charge is made, so you catch fraud quickly.

Virtual cards are stronger than relying on your card issuer's fraud protection alone, because fraud protection only works after a charge has been made and reported. A virtual card can prevent the fraudulent charge from going through in the first place.

If your card issuer does not offer virtual numbers, you can use a third-party service like Privacy, Blur, or Abine Masked Numbers. These services generate virtual numbers tied to your real card and work similarly to issuer-provided virtual cards. They usually charge a monthly subscription fee (typically $5 to $15 per month), whereas issuer-provided virtual cards are free.

Common situations where virtual cards are most useful

Virtual cards are most valuable when you are shopping on a website you do not fully trust or when you are signing up for a subscription you might cancel. A one-time virtual number for a new online retailer means you do not have to worry about that store's security practices or whether they will sell your information later. A capped, merchant-locked virtual number for a streaming service means you can cancel anytime without worrying that the merchant will keep charging you.

Virtual cards are also useful for free trial signups, where you want to make sure you are not charged after the trial ends. You can set the virtual number to expire on the day the trial ends, so any attempt to charge you after that date will be declined.

For recurring bills from companies you trust — your internet provider, your insurance company, your phone bill — a virtual card is less critical, because you already have a relationship with the merchant and can dispute charges easily if something goes wrong. But even for trusted merchants, a virtual card adds a small layer of extra protection at no cost.

Frequently Asked Questions

Can I use a virtual card number for a subscription and then cancel it without the merchant charging me again?

Yes, if you set the virtual number to expire on a specific date or set a spending cap. The merchant will attempt to charge the expired number on the renewal date, and the charge will be declined. However, the merchant may still send you a notice asking for a new payment method. The safest approach is to cancel the subscription through the merchant's website rather than relying on the virtual number to decline the charge.

What happens if I use a virtual card and then need to return the item?

The refund will go back to your real credit card account, not to the virtual number itself. The merchant's system will process the refund using the original transaction information, which is linked to your real account behind the scenes. You will see the refund appear on your regular credit card statement within a few days to a week, depending on your card issuer and the merchant.

Can someone use my virtual card number if they see it on my screen or in an email?

Yes, they can use it the same way you would — by entering it at an online checkout. This is why you should not email a virtual card number to anyone or leave it visible on a shared screen. If you need to give someone else permission to make a purchase on your account, use your card issuer's authorized user feature or a shared payment method instead.

Do virtual cards affect my credit score?

No. Virtual card numbers are tied to your real credit card account, so they do not create a separate account or show up separately on your credit report. All charges made with virtual numbers appear on your regular credit card statement and affect your credit score the same way any other charge would.

What if my card issuer does not offer virtual cards?

You can request the feature through your card issuer's customer service line or app, as many issuers are adding virtual cards to their offerings. If your issuer does not plan to add them, you can use a third-party virtual card service like Privacy or Blur, which generates numbers for you and charges a monthly fee. Alternatively, you can use your card issuer's fraud protection and purchase alerts as your main security layer for online shopping.