How to Use a Virtual Credit Card for Online Shopping and Payments

What a Virtual Credit Card Is and How It Works

A virtual credit card is a temporary card number that your credit card company generates for you to use online. Instead of typing your real card number into a website, you use this temporary number instead. The charge still comes from your actual account, but the merchant never sees your real card details.

When you request a virtual card number through your card issuer's app or website, the system creates a unique 16-digit number, expiration date, and security code. You can use this number just like a regular card number at checkout. The merchant processes the payment normally, but your actual card number stays hidden. If that temporary number gets stolen or the merchant's database gets hacked, the thief has a number that either doesn't work anymore or is tied to limits you set.

Virtual cards work through the same payment networks as physical cards — Visa, Mastercard, American Express, or Discover. Your bank or card issuer controls the backend, so they can turn off a virtual number, set spending limits on it, or restrict it to a single merchant if you want.

Key Takeaways

• Virtual card numbers are temporary numbers your credit card company generates so you don't have to share your real card number online.
• You can set limits on how much a virtual number can be charged, how many times it can be used, or restrict it to one specific merchant.
• Not all credit card companies offer virtual cards — check your card issuer's app or website to see if the feature is available to you.
• Virtual cards work at most online retailers, but some subscription services and certain merchants may not accept them.
• If a virtual card number is compromised, you can delete it and create a new one without affecting your actual account or other card numbers.

Which Credit Card Companies Offer Virtual Cards

Virtual card programs vary by issuer. Citi offers virtual account numbers through Citi Identity Theft Solutions. Capital One provides Eno, a virtual card assistant built into their app. Discover has a virtual card feature in their mobile app. American Express offers virtual card numbers for cardholders. Bank of America has virtual card numbers available through their app.

If you have a card from a smaller regional bank or credit union, they may not offer this feature yet. The easiest way to find out is to open your card issuer's mobile app and look for a section labeled "Virtual Card," "Card Controls," "Digital Card," or "Secure Shopping." If you don't see it, you can call the customer service number on the back of your card and ask whether virtual cards are available on your account.

Some card issuers limit virtual cards to certain account types or require you to have had the card for a minimum amount of time. A few require you to opt in or enable the feature before you can use it.

How to Generate and Use a Virtual Card Number

The process differs slightly by card issuer, but the basic steps are the same. Open your card issuer's mobile app or log into their website. Look for a menu option related to cards, security, or account controls. Select the option to create or generate a virtual card number.

When you create a virtual number, you'll usually see options to customize it. You can often set a spending limit — for example, $50 for a single purchase or $200 per month. Some issuers let you restrict the virtual number to a single merchant, so it only works at that one store. You can also set an expiration date, which might be after one purchase, after 30 days, or after a year.

Once you've generated the number, you'll see a temporary card number, expiration date, and CVV (the three-digit security code). Copy these details and use them at checkout just as you would a physical card number. The merchant processes the payment normally and has no way to know it's a virtual number.

After the transaction completes, you can delete the virtual number from your app, or you can leave it active if you think you'll use it again at that merchant. If you set it to expire after one use, it automatically becomes inactive after the first charge.

When Virtual Cards Protect You and When They Don't

Virtual cards are most useful when you're shopping at a new online retailer you don't fully trust, or when you're making a one-time purchase from a merchant you may never visit again. By using a virtual number instead of your real card number, you reduce the risk that your actual account details will be exposed if that retailer's database is breached.

Virtual cards also work well for subscription services. You can create a virtual number specifically for a streaming service or gym membership, set it to expire after 12 months, and the subscription will stop automatically when the card expires. This prevents accidental recurring charges if you forget to cancel.

Virtual cards do not protect you against fraud you commit yourself — for example, if you authorize a charge and then claim you didn't. They also don't protect you if you're tricked into giving someone your virtual card number directly. And they won't help if a scammer calls pretending to be your bank and you give them information over the phone. Virtual cards are a tool against data breaches at merchants, not against social engineering or your own mistakes.

Limits and Situations Where Virtual Cards Don't Work

Some merchants don't accept virtual card numbers. This happens most often with subscription services that need to store your card on file and charge it repeatedly — some of these systems are older and can't process temporary numbers. Airlines, hotels, and car rental companies sometimes reject virtual cards because they need to verify your identity at pickup or check-in.

In-person purchases at physical stores won't work with a virtual card number because you can't hand a merchant a number — you need a physical card or a digital wallet on your phone. Some merchants also require the billing address on file to match exactly, and virtual cards sometimes cause address verification to fail if the system is strict.

If a virtual card number is declined, you have two options: use your physical card instead, or contact your card issuer to ask whether they can adjust the virtual card settings (for example, removing a merchant restriction or raising the spending limit). Some issuers also have a customer service team that can manually override a decline if the merchant is legitimate.

Managing and Deleting Virtual Card Numbers

You can have multiple virtual card numbers active at the same time. Many people create one for each subscription service, one for online shopping, and one for travel bookings. Your card issuer's app will show you a list of all active virtual numbers, what they're being used for, and how much has been charged to each one.

To delete a virtual number, open your card issuer's app, find the virtual card you want to remove, and select delete or deactivate. The number becomes inactive immediately and can't be used for new charges. If a merchant tries to charge it after you've deleted it, the charge will be declined.

If a virtual card number is compromised — for example, you see an unauthorized charge or you suspect the number was stolen — delete it right away and create a new one. You won't lose access to your account or your other card numbers. The unauthorized charge itself is handled the same way as any other fraudulent charge on your account: you report it to your card issuer and they investigate.

Virtual Cards vs. Other Security Tools

Virtual cards are one option for protecting your card information online, but they're not the only one. Digital wallets like Apple Pay, Google Pay, and Samsung Pay also hide your real card number from merchants — they create a tokenized number that's unique to your phone. The main difference is that digital wallets work both online and in stores, while virtual cards are online-only.

Two-factor authentication (a code sent to your phone when you log in) protects your account from being hacked, but it doesn't hide your card number from merchants. Purchase protection and fraud monitoring (features most credit cards include) don't prevent your number from being stolen — they just help you dispute charges after the fact.

Virtual cards are most useful when combined with other tools. For example, you might use a digital wallet for everyday online shopping, a virtual card for new merchants you're unsure about, and your physical card for in-person purchases. The more layers of protection you use, the harder it is for a thief to access your actual account.

Frequently Asked Questions

Can I use a virtual card number more than once?

Yes, if you don't set it to expire after one use. You can reuse the same virtual number at the same merchant multiple times, or you can set it to work at multiple merchants. However, many people create a new virtual number for each merchant to keep their spending organized and limit damage if one number is compromised.

What happens if I delete a virtual card number and the merchant tries to charge it again?

The charge will be declined. If you're canceling a subscription, make sure you actually cancel it with the merchant before you delete the virtual card number — otherwise the merchant won't know the subscription is supposed to end, and you might get a surprise charge later when they try a different payment method on file.

Do virtual cards cost extra money?

No. Virtual cards are a free feature offered by most major credit card companies. There are no fees to generate a virtual number, use it, or delete it. The only cost is the purchase itself, which you would pay anyway with your physical card.

Can I use a virtual card for international purchases?

Yes, virtual cards work internationally the same way physical cards do. The merchant's location doesn't matter — what matters is whether the merchant accepts your card network (Visa, Mastercard, etc.) and whether your card issuer allows charges in that country. Some card issuers block international charges by default for security, so you may need to notify them before traveling.

What if my virtual card is declined at checkout?

First, check that you entered the number, expiration date, and CVV correctly — virtual card numbers are just as prone to typos as physical card numbers. If the number is correct, the decline might be because the merchant doesn't accept virtual cards, the spending limit has been reached, or the card has expired. You can check your card issuer's app to see the status of the virtual number, adjust the limit if needed, or create a new one.