What a virtual credit card number is
A virtual credit card number is a temporary set of card digits your bank or card issuer generates for you to use online. The number is linked to your real account but is not the same as your actual card number. When you use a virtual number for a purchase, the transaction posts to your real card, but the merchant never sees your true account details.
Virtual numbers work through your card issuer's app or website. You request a new number, set a spending limit and expiration date if you want to, and then use that number at checkout. Once you're done with it — or once it expires — that number becomes useless to anyone who might have captured it. Your actual card number stays private.
The technology behind this is called tokenization. Your bank creates a unique token (the virtual number) that routes payments to your real account without exposing your primary card details to the merchant's systems.
Key Takeaways
- Virtual numbers mask your real card number from merchants, so a data breach at a store won't expose your actual account.
- You control the spending limit and expiration date of each virtual number, which reduces the damage if a number is stolen or misused.
- Major issuers including Citi, Bank of America, Capital One, and American Express offer virtual card services, though feature availability varies by card and account type.
- Virtual numbers work for online shopping and some subscription services, but not for in-person purchases, gas pumps, or ATM withdrawals.
- Virtual numbers do not change your fraud protections — you still have zero liability for unauthorized charges under federal law.
Which card issuers offer virtual numbers
Citi offers Citi Virtual Account Numbers to most cardholders through its mobile app. You can generate a number in seconds, set a spending cap, and assign it to a specific merchant or use it as a one-time number. The service is free.
Bank of America provides ShopSafe to cardholders of most of its consumer credit cards. You create a virtual number through the card's online portal, choose a spending limit, and set an expiration date. ShopSafe is also free and available 24/7.
Capital One offers Eno, a virtual card assistant that works through your browser or mobile app. Eno can generate numbers on demand or automatically create one when you're about to check out at a new merchant. It's included free with most Capital One credit cards.
American Express provides Virtual Card Numbers to cardholders of most of its consumer and small-business cards. You generate numbers through your online account or the Amex app, set a limit, and choose an expiration date. The service is free.
Discover, Chase, and other issuers do not currently offer virtual card numbers as a standard feature. Some smaller banks and fintech companies have launched their own versions, but availability is limited and terms vary. Check your card issuer's app or website to see what's available on your account.
How to set up and use a virtual number
The process is nearly identical across issuers. Log into your card's mobile app or online account and look for a section labeled "Virtual Card Numbers," "Virtual Account Numbers," "ShopSafe," "Eno," or similar. Click to generate a new number.
You'll see a temporary card number, expiration date, and CVV code appear on your screen. Most issuers let you set a spending limit before you generate the number — this is optional but recommended. Some also let you name the number (for example, "Amazon") so you remember which merchant it's tied to.
Copy the virtual number and use it at checkout just as you would your real card. The transaction will post to your account normally, and you'll see it in your statement under the merchant's name, not under the virtual number itself. You can reuse the same virtual number at the same merchant multiple times, or generate a new one each time — the choice is yours.
To stop using a number, straightforward delete it in your app or let it expire. Any attempt to charge the number after that will be declined.
What virtual numbers protect you against
Virtual numbers reduce your exposure if a merchant's database is breached. A hacker who steals the virtual number from a retailer's system cannot use it anywhere else, because it's tied to that one account and often has a spending limit you set. Once the number expires or you delete it, it's worthless.
They also protect you against merchant errors. If a company accidentally charges your card twice, or a subscription service keeps billing you after you cancel, you can delete that virtual number and the charges stop. You don't have to dispute the transaction or wait for a refund — the number straightforward no longer works.
Virtual numbers also reduce the risk of skimming at checkout. Because the merchant never sees your real card number, a skimmer cannot capture it, even if they intercept the virtual number. That number is useless outside the context where you used it.
However, virtual numbers do not protect you against phishing, social engineering, or your own mistakes. If you give a virtual number to a scammer thinking they're legitimate, you've still lost money. And if you use a virtual number at a fraudulent website, the scammer can still charge it up to your set limit.
Where virtual numbers do and don't work
Virtual numbers work for most online purchases: retail websites, digital services, subscription boxes, and one-time checkouts. They also work for some recurring subscriptions, though not all subscription platforms accept them.
Virtual numbers do not work at physical stores, gas pumps, or ATMs. They cannot be used for in-person transactions because there is no physical card to present. Some issuers are testing digital wallet integration (Apple Pay, Google Pay) that would let you use a virtual number in person, but this is not yet standard.
Virtual numbers also may not work with certain merchants that require address verification or that flag virtual numbers as high-risk. Some airlines, hotels, and rental car companies decline virtual numbers because they want to match the card to the person checking in. If a virtual number is declined, you'll need to use your real card or contact the merchant to ask why.
International merchants sometimes reject virtual numbers if their payment processors don't recognize the issuing bank's tokenization system. Test with a small purchase first if you're unsure.
Virtual numbers versus other security tools
Virtual numbers are one layer of protection, but they work alongside other tools. Purchase protection (offered by most card issuers) covers you if an item doesn't arrive or doesn't match the description — virtual numbers don't change this. Fraud monitoring (also standard) flags suspicious charges — again, virtual numbers don't replace this.
Virtual numbers are different from a credit freeze, which locks your credit file so no one can open new accounts in your name. A freeze protects against identity theft; virtual numbers protect against merchant-specific fraud. You can use both.
They're also different from a credit monitoring service, which alerts you if your personal information appears on the dark web or if someone tries to open an account using your details. Virtual numbers are a transaction-level tool; monitoring is an identity-level tool. They serve different purposes.
Virtual numbers do not replace strong passwords, two-factor authentication, or checking your statements regularly. They're most effective as part of a broader security routine.
Frequently Asked Questions
Can I use a virtual number more than once?
Yes. You can reuse the same virtual number at the same merchant as many times as you want. You can also generate a new number for the same merchant if you prefer. Most people reuse numbers for recurring subscriptions and generate new ones for one-time purchases, but the choice is yours.
What happens if someone steals my virtual number?
If the number has a spending limit, they can only charge up to that limit. Once the limit is reached or the number expires, further charges will be declined. You can also delete the number when ready through your app. You have the same zero-liability protection for unauthorized charges on a virtual number as you do on your real card under federal law.
Do virtual numbers affect my credit score?
No. Virtual numbers are just a way to route transactions to your real account. They don't create new accounts, don't show up separately on your credit report, and don't change your credit utilization or payment history. Your credit score is based on your actual card account, not on the virtual numbers you generate.
Can I use a virtual number for a subscription I want to cancel?
Yes. Generate a virtual number specifically for that subscription, set it to expire on a date before your next billing cycle, and delete it when you're ready to stop. The subscription service won't be able to charge you after the number expires. This is cleaner than disputing a charge, though you should still follow the service's cancellation process to avoid being billed again.
Will a virtual number work if I'm traveling internationally?
It depends on the merchant and their payment processor. Many international websites and services accept virtual numbers without issue. Some do not. If you're planning to make purchases abroad, test a virtual number with a small transaction first, or keep your real card number handy as a backup.