A virtual credit card is a temporary card number linked to your real account that you use for online purchases instead of your actual card details
Virtual credit cards generate a unique 16-digit number, expiration date, and CVV for each transaction or merchant. The number connects to your real account behind the scenes, but the merchant never sees your actual card number. When you use a virtual card to buy something online, the charge still appears on your regular statement under your real card's name.
Most virtual cards expire after a single use or after a set time period — sometimes 24 hours, sometimes a year. If a merchant's website gets hacked or sells your data, the stolen number is worthless because it no longer works. Your real card number stays hidden in your issuer's system.
Virtual cards are different from digital wallets like Apple Pay or Google Pay, which tokenize your real card number. A virtual card is a separate number entirely, generated just for that purchase or that merchant.
Key Takeaways
- Virtual card numbers are temporary and unique to each transaction, so a data breach at one merchant cannot expose your actual card number.
- Most major card issuers now offer virtual cards through their mobile app or website at no extra cost.
- Virtual cards work for online purchases but not in physical stores, and some subscription services and international merchants may reject them.
- You can set spending limits on individual virtual cards, which helps you control how much a merchant can charge.
Which card issuers offer virtual card numbers
Capital One, Citi, American Express, Chase, and Bank of America all offer virtual card numbers to their cardholders. The feature is usually free and built into their mobile app or online account dashboard. You generate a new number whenever you need one, and it takes seconds.
Some issuers call the feature by different names — Capital One calls it Eno, American Express calls it ShopSafe, and Citi calls it Virtual Account Numbers. The function is the same: a temporary number that masks your real card.
Not every card product from every issuer includes virtual cards. Check your issuer's app or log into your online account to see whether the feature is available on your specific card. If it is not, you can contact the issuer to ask whether it is coming to your card type.
How to generate and use a virtual card number
The process differs slightly by issuer, but the basic steps are the same. Open your card issuer's mobile app or website, find the virtual card or card management section, and select the option to generate a new number. You will see a 16-digit card number, expiration date, and CVV appear on your screen.
Copy that number into the checkout form on the merchant's website just as you would your real card number. The transaction processes normally, and the charge appears on your statement. The virtual number either expires when ready after the purchase or after a set window — check your issuer's rules for that specific card.
Some issuers let you set a spending limit on the virtual number before you generate it. This means even if the merchant tries to charge more than your limit, the transaction will decline. You can also name the virtual card (for example, "Amazon" or "Subscription Service") so you remember which merchant it was for when you see the charge on your statement.
Where virtual cards do and do not work
Virtual cards work for any online purchase where you enter a card number manually — shopping sites, subscription services, travel booking, digital goods. They do not work at physical stores or ATMs because there is no physical card to insert or tap.
Some merchants reject virtual card numbers because their fraud detection systems flag them as suspicious. Subscription services sometimes decline virtual cards if the number expires before the next billing cycle. International merchants and smaller retailers may not accept them at all.
If a virtual card is declined, you have two options: use your real card number instead, or contact your card issuer to ask whether they can issue a virtual card with a longer expiration date for that merchant. Some issuers let you set virtual cards to expire after a year specifically for recurring charges.
Security benefits and limitations
The main security benefit is that your real card number stays out of merchants' systems. If Target, Home Depot, or any other retailer suffers a breach, the hackers get a useless temporary number instead of your actual card details. You can cancel or ignore that virtual number and continue using your real card everywhere else.
Virtual cards do not protect you from your own mistakes. If you enter a virtual card number on a phishing website thinking it is real, the scammer still gets your money — the temporary number does not prevent that. Virtual cards also do not protect you from a merchant you trust deciding to overcharge you or billing you without permission.
Your real card's fraud protections still explore to virtual card purchases. If a charge is unauthorized, you can dispute it with your issuer the same way you would dispute any other charge. The virtual number is just a shield between your real card and the merchant's database.
Virtual cards versus other security tools
Digital wallets like Apple Pay and Google Pay encrypt your card number when you use them, but they do not hide it from the merchant the way virtual cards do. The merchant receives a tokenized version of your real card, not a separate number. Both tools are find, but they work differently.
Some credit monitoring services and password managers now generate virtual card numbers as a feature. These third-party tools sit between you and the merchant and create a new number for each purchase. They offer similar protection to issuer-provided virtual cards, though you are trusting an additional company with your payment information.
The simplest approach is to use your card issuer's virtual card feature if it is available, since you do not need to sign up for another service or give your information to a third party. If your issuer does not offer virtual cards, a password manager or credit monitoring service that includes the feature is a reasonable alternative.
When virtual cards make the most sense
Virtual cards are most useful when you are buying from a merchant you do not fully trust, trying a new subscription service for the first time, or shopping on a site with a history of security problems. They are also helpful if you want to set a spending limit on a single purchase — for example, limiting a virtual card to $50 for a free trial that requires a payment method.
You do not need a virtual card for every purchase. Major retailers with strong security records and merchants you have used many times before are generally safe with your real card number. Virtual cards are a tool to use strategically, not a replacement for your real card.
If you shop online frequently or subscribe to multiple services, generating a virtual card for each merchant takes only a few seconds and gives you an extra layer of control. You can see at a glance which merchants have your card information and cancel individual numbers if you stop using a service.
Frequently Asked Questions
Can I use a virtual card number for in-person purchases?
No. Virtual cards are numbers only — there is no physical card to insert into a reader or tap on a terminal. For in-person shopping, use your real card, a digital wallet, or cash. Virtual cards work only for online purchases where you enter a card number manually.
What happens if a virtual card number is stolen?
If the number is stolen before it expires, the thief can use it to make purchases just like any other card number. However, once the virtual card expires (which happens quickly, often after one use), the number becomes useless. Your real card number remains safe because it was never shared with the merchant.
Do virtual cards cost extra money?
No. Virtual card numbers are a free feature offered by most major card issuers. There are no monthly fees, per-transaction charges, or hidden costs. If your card issuer offers the feature, you can generate as many virtual numbers as you want at no charge.
Can I use a virtual card for recurring charges like Netflix or gym memberships?
Yes, but with a limitation. You need a virtual card number that does not expire before your next billing date. Some issuers let you set virtual cards to expire after a year specifically for subscriptions. Check your issuer's settings to see whether you can create a longer-lasting virtual number for recurring charges.
Will my rewards points count if I use a virtual card?
Yes. Virtual card purchases earn the same rewards as your real card because the charge posts to your actual account. The virtual number is just a temporary mask — the transaction is still yours, and all your card benefits explore.