How to Use a Virtual Credit Card for Online Shopping and Payments
What a Virtual Credit Card Is and How It Works
A virtual credit card is a temporary card number that your credit card issuer generates for you to use online. Instead of typing your real card number into a website, you use this temporary number — it has its own expiration date and security code, separate from your physical card. When you make a purchase with the virtual number, the charge still goes to your actual credit card account, but the merchant never sees your real card details.
The temporary number works only for that specific purchase or merchant, depending on how you set it up. Once the transaction is complete, that virtual number becomes useless to anyone who might have stolen it. If a website gets hacked or a merchant misuses your information, the thieves have a number that no longer works and cannot be used to make new charges.
Most major credit card issuers now offer virtual card numbers through their mobile apps or websites. American Express calls theirs Virtual Card Numbers, Capital One offers Eno, and Citi has Virtual Account Numbers. Some smaller issuers and online banks offer them too, though not all do — check your card issuer's app or website to see if the feature is available to you.
Key Takeaways
- Virtual card numbers are temporary numbers your issuer creates for online purchases, keeping your real card number hidden from merchants.
- You generate a new virtual number through your card issuer's app or website, usually in seconds, and can set it to work for one purchase or one merchant only.
- If a website is hacked or a merchant misuses your data, the virtual number cannot be used for new charges because it expires or is tied to that single transaction.
- Virtual cards work anywhere your regular credit card works online, but some subscription services and repeat merchants may have trouble if the number expires between charges.
How to Generate a Virtual Card Number
The process is nearly identical across all card issuers. Open your credit card's mobile app or log into your online account on the issuer's website. Look for a section labeled "Virtual Card," "Virtual Numbers," "Card Controls," or "Security" — the exact name varies by bank. Tap or click the option to generate a new number.
You will then see a screen asking you to choose how the virtual number should work. Most issuers let you pick between a single-use number (good for one purchase only) or a merchant-locked number (good for multiple purchases from the same company, but nowhere else). Some also let you set a spending limit or expiration date. Choose your preference, and the app will generate a new 16-digit number along with a new expiration date and security code.
Copy the number, expiration date, and CVV (the three-digit security code) and paste them into the checkout form just as you would your regular card. The transaction processes normally, and the charge appears on your regular credit card statement. The virtual number itself stays in your app so you can view it later if you need to check on a charge or dispute it.
When to Use a Virtual Card Number Instead of Your Real Card
Use a virtual number any time you are shopping on a website you do not fully trust or have never used before. This includes small retailers, international sites, or marketplaces where many sellers operate. Even if the site looks legitimate, a virtual number costs you nothing and takes 30 seconds to create — the protection is worth the small extra step.
Virtual numbers are especially useful for recurring charges like subscriptions, free trials, or memberships. If you want to sign up for a service but worry about being charged after a free period ends, use a single-use virtual number. When the trial ends and the company tries to charge you, the number will be declined, and you will not be automatically billed. You can always generate a new number later if you decide to keep the service.
You should also use a virtual number when making a purchase from a company that has had a data breach in the past, or when buying from a site that will store your card on file for future purchases. Retailers like Amazon and your regular grocery store, where you trust the company and want to save your card for convenience, do not need a virtual number — your real card is fine there.
What Happens When a Merchant Tries to Charge a Virtual Number Again
If you used a single-use virtual number, the merchant's system will receive a decline message when it tries to charge that number a second time. This is the same decline you would see if you tried to use an expired card. The charge will not go through, and no money will be taken from your account.
For merchant-locked numbers, the card will work for repeat charges from that specific company, but the number will eventually expire based on the date you set when you created it. Once it expires, any attempt to charge it will fail. This can be a problem if you forget to update your payment method before the expiration date — your subscription might be interrupted, or a bill might go unpaid.
If you are using a virtual number for a subscription you plan to keep, set a reminder to update your payment method a week or two before the virtual number expires. Log back into your card issuer's app, generate a fresh virtual number for that same merchant, and update it in the subscription service's account settings. This prevents any service interruption.
Virtual Cards and Fraud Protection
Virtual card numbers add a layer of protection, but they do not replace your credit card's built-in fraud protection. Your card issuer still monitors for suspicious activity and will contact you if something looks wrong. If someone uses your virtual number fraudulently — which is unlikely since the number expires or is merchant-locked — you can dispute the charge just as you would with your regular card.
The real benefit of a virtual number is prevention. If a retailer's database is hacked, the thieves get a number that either has already expired or only works at that one merchant. They cannot use it to make purchases elsewhere or to drain your account. This means fewer fraudulent charges to dispute in the first place, and less time spent dealing with your bank.
Virtual numbers do not protect you from scams where you knowingly give your information to a fraudster — for example, if someone tricks you into sending money or if you accidentally order from a fake website. In those cases, the problem is not the card number itself, but the decision to send money to the wrong place. A virtual number would not have prevented that.
Limits and Situations Where Virtual Numbers Do Not Work
Some merchants and payment systems do not accept virtual card numbers. Gas station pumps, for example, often require the card to be physically present or linked to a specific account. Toll roads and parking meters that charge your card on file may also reject a virtual number. In-person purchases at stores obviously require your physical card, not a virtual number.
Certain subscription services and repeat billing systems have trouble with virtual numbers that expire between charges. If your virtual number expires on the 15th of the month but your gym charges you on the 20th, the charge will fail. Some companies' billing systems are not set up to handle this, and you may need to contact customer service to update your payment method manually.
International transactions can be hit or miss with virtual numbers. Some foreign merchants' payment systems do not process them correctly, even though the number is valid. If a virtual number is declined on an international purchase, try your regular card instead. You can also contact your card issuer's customer service to ask whether virtual numbers work in the country you are buying from.
How Virtual Cards Compare to Other Payment Methods
Virtual card numbers are different from digital wallets like Apple Pay or Google Pay, which store your real card information on your phone and use tokenization (a different kind of temporary number) to process payments. Both methods hide your card number from merchants, but digital wallets work at physical stores and gas pumps, while virtual card numbers work primarily online. Many people use both: a digital wallet for in-person shopping and virtual card numbers for online purchases.
Virtual numbers are also different from prepaid cards or separate bank accounts set up just for online shopping. Those methods require you to load money into them first, whereas a virtual card number draws from your regular credit card account. Virtual numbers are faster to set up and do not require you to manage multiple accounts or balances.
If your card issuer does not offer virtual numbers, you can use a service like Privacy or Blur, which generate virtual numbers for a fee or subscription. These third-party services work similarly to your bank's virtual numbers but add an extra step since you are routing through another company. Your card issuer's built-in virtual numbers are usually simpler and free.
Frequently Asked Questions
Can I use a virtual card number at a store in person?
No. Virtual card numbers are for online purchases only. At a physical store, you need your actual credit card or a digital wallet like Apple Pay. Some stores let you pay online for in-store pickup, and you could use a virtual number for that online order.
What if I lose my phone and forget my virtual card numbers?
Your virtual numbers are stored in your card issuer's app and on their servers, not just on your phone. Log into your account on a computer or a new phone, and all your virtual numbers will still be there. You can view them, update them, or generate new ones whenever you need to.
Do virtual card numbers hurt my credit score?
No. Virtual numbers are just temporary versions of your existing card, so they do not create a new account or a new credit inquiry. Your credit score is based on your actual credit card account, not on how many virtual numbers you generate.
Can I use a virtual number for a purchase I want to return?
Yes. Returns and refunds work the same way with a virtual number as they do with your regular card. The refund goes back to your credit card account, and the virtual number itself does not matter. The merchant's system handles the refund based on the original transaction, not the card number used.
What if a website says my virtual card number is invalid?
First, check that you copied the number, expiration date, and CVV correctly — typos are the most common cause. If those are correct, the website's payment system may not support virtual numbers. Try your regular card instead, or contact the merchant's customer service to ask if they accept virtual card numbers.