What a virtual credit card is and how it works
A virtual credit card is a temporary card number linked to your real credit card account. Instead of using your actual 16-digit card number online, you generate a unique number that works only once or for a single merchant. When the transaction ends or the card expires, that number becomes useless to anyone who might have stolen it.
The process is straightforward: you open your card issuer's app or website, request a virtual card number, and it appears within seconds. You copy it into the checkout form just like a regular card number. The charge posts to your actual account, but the merchant never sees your real card details. If a website gets hacked later, the stolen number cannot be used anywhere else.
Virtual cards cost nothing to generate — they are a feature some credit card companies offer to existing cardholders at no extra charge. You do not need a separate account or approval process beyond having the card issuer's app installed.
Key Takeaways
- Virtual card numbers are generated when ready through your card issuer's app and expire after one use or a set time period, protecting your real card details from theft.
- Most major card issuers including Capital One, Citi, and American Express offer virtual cards to existing cardholders at no cost.
- Virtual cards work for online shopping, subscriptions, and one-time purchases, but not for in-person transactions or ATM withdrawals.
- Each virtual number is tied to your real account, so the charge still counts toward your credit limit and appears on your regular statement.
Which credit card companies offer virtual cards
Capital One offers virtual card numbers through its mobile app to all cardholders. The numbers generate when ready and can be set to expire after a single transaction or after a specific date you choose. Capital One's version is called Eno, and it also blocks merchants from charging you more than the amount you authorized.
Citi provides virtual account numbers through its mobile app for Citi credit cardholders. You can create a new number for each purchase and set spending limits on individual numbers. The feature is built into the Citi Mobile App with no separate sign-up required.
American Express cardholders can generate virtual card numbers through the American Express app or website. The numbers work for online purchases and subscriptions, and you can view all virtual numbers you have created in your account history.
Chase, Bank of America, and Discover do not currently offer virtual card numbers as a standard feature, though this may change. Some smaller banks and fintech card issuers have begun adding the feature, so check your card issuer's app to see if the option appears in your account settings.
How to generate a virtual card number
The steps vary slightly by issuer, but the basic process is the same across all providers. First, open your card issuer's mobile app or log into their website. Look for a section labeled "Virtual Cards," "Card Controls," "Card Management," or "Security Settings" — the exact name depends on the issuer.
Once you find the virtual card feature, select the option to generate a new number. You will see fields to set how long the card should last: some let you choose a single transaction, others let you set an expiration date weeks or months in the future. Some issuers let you set a spending limit on the virtual number so it cannot be charged beyond a certain amount.
After you confirm your choices, the virtual card number, expiration date, and CVV appear on your screen. Copy these details and paste them into the online checkout form. The transaction processes when ready using your real account, but the merchant records only the virtual number.
When virtual cards work and when they don't
Virtual cards work for any online purchase where you enter a card number manually — retail websites, subscription services, digital storefronts, and one-time checkouts all accept them. They are especially useful for recurring charges like streaming services or software subscriptions, because you can create a virtual number that expires after a set date, automatically stopping the charge when you want it to end.
Virtual cards do not work for in-person purchases at physical stores, because the merchant needs to read your physical card or tap it. They also do not work at ATMs or for cash advances. Some merchants that use unusual payment systems or older checkout technology may reject a virtual number, though this is rare with major retailers.
Subscription services sometimes flag virtual cards as suspicious because the card number changes or expires unexpectedly. If a subscription renewal fails, you may need to update your payment method with the merchant or contact their customer service to explain the situation.
Security benefits and real limitations
The main security benefit is that a stolen virtual card number cannot be used anywhere except the merchant you gave it to. If an online retailer gets breached, the hacker obtains a number that either has already expired or is locked to a single transaction. Your actual card number remains unknown to the merchant and stays safe in your card issuer's system.
Virtual cards do not protect you from fraud you commit yourself — if you authorize a charge and then dispute it falsely, the card issuer will still hold you responsible. They also do not protect you from a compromised device: if your phone or computer has malware, a thief can see the virtual number you generate just as easily as they could see a real one.
Virtual cards are a useful layer of protection, but they work best as part of a broader security routine: use strong, unique passwords for each online account, enable two-factor authentication on sensitive accounts, and monitor your statement regularly for charges you do not recognize.
Virtual cards versus other security tools
Virtual cards and purchase protection (fraud protection offered by your card issuer) serve different purposes. Purchase protection reimburses you if an unauthorized charge appears on your statement. Virtual cards prevent unauthorized charges from happening in the first place by giving merchants a number that cannot be reused.
Some people use virtual cards alongside a separate prepaid card or digital wallet. A prepaid card lets you load a specific amount of money and spend only that amount, which limits your loss if the card is compromised. A digital wallet like Apple Pay or Google Pay tokenizes your card, meaning the merchant never sees your real number — but the token can be reused by that merchant. Virtual cards are more restrictive: each number is typically good for one merchant or one transaction.
The best approach depends on your habits. If you shop at many different websites and worry about data breaches, virtual cards are worth using. If you make most purchases at the same few trusted retailers, purchase protection alone may be sufficient.
Frequently Asked Questions
Do I have to pay for virtual cards?
No. Virtual cards are a free feature offered by card issuers to existing cardholders. You do not pay a fee to generate a number, and there is no monthly charge. The only cost is the purchase itself, which charges to your regular credit card account.
Can I use a virtual card number more than once?
It depends on how you set it up. Some virtual cards expire after a single transaction, making them impossible to reuse. Others let you set an expiration date weeks or months away, so you can use the same number multiple times until it expires. Check your card issuer's app to see which option you chose when you generated the number.
What happens if a merchant charges me twice with the same virtual card number?
The charge posts to your real account just like any other purchase. If you notice a duplicate charge, contact the merchant's customer service first to request a refund. If they refuse, you can dispute the charge with your card issuer using the same process you would for any unauthorized or duplicate charge on your regular card.
Will using a virtual card hurt my credit score?
No. Virtual cards are tied to your real account, so the purchase counts toward your credit utilization and payment history the same way a regular purchase does. Generating a virtual card number does not trigger a hard inquiry or create a new account, so it has no direct impact on your credit score.
Can I use a virtual card for subscriptions that auto-renew?
Yes, but with a caveat. You can create a virtual card number and use it to start a subscription. However, if you set the virtual number to expire on a specific date, the auto-renewal will fail when that date arrives. Some subscriptions will send you a notification to update your payment method; others will straightforward cancel. If you want a virtual card to work for recurring charges, set the expiration date after the subscription period ends, or choose the option to let the number last indefinitely.