How Virtual Credit Card Numbers Work and When to Use Them
What a virtual credit card number is and how it works
A virtual credit card number is a temporary set of card digits that your bank or credit card company generates for you. It connects to your real account but is not the same as your actual card number. When you use it to make a purchase online, the merchant sees only the virtual number, not your real one.
The process is straightforward: you log into your card issuer's app or website, request a new virtual number, and it appears within seconds. You then use that number, expiration date, and CVV code just like you would a regular card number—entering it at checkout or saving it to a digital wallet. The charge still goes to your actual account, but the merchant never learns your real card details.
Most virtual card numbers expire after a single use or after a set time period (often 30 to 90 days), depending on how your bank sets them up. Some let you set a spending limit on each virtual number, so even if that number is stolen, the thief cannot charge more than the amount you chose.
Key Takeaways
- Virtual card numbers are temporary digits generated by your bank that mask your real card number during online purchases.
- Each virtual number typically expires after one use or within a set timeframe, limiting the window for fraud if the number is compromised.
- You can set spending limits on individual virtual numbers, so a stolen number cannot be used beyond the amount you allow.
- Virtual numbers work for online shopping, subscriptions, and one-time purchases, but not for in-person card swipes or ATM withdrawals.
- Not all banks and credit card companies offer this feature, so check with your issuer to see if it is available on your account.
Which banks and card companies offer virtual numbers
Major issuers have rolled out virtual card programs, but not all of them, and the names and features vary. Citi offers Citi Virtual Account Numbers to may be able to access cardholders. Capital One has Eno, a browser extension and app that generates numbers on the fly. American Express offers virtual numbers through its app for most consumer cards. Discover has a similar feature built into its mobile app.
Smaller banks and credit unions may not offer this yet. The best way to find out is to open your card issuer's mobile app or log into your online account and look for a section labeled "virtual card," "card controls," "security," or "digital wallet." If you do not see it, contact your bank's customer service and ask whether the feature is available on your specific card type.
Some issuers limit virtual numbers to certain card types—for example, only premium or rewards cards—so check the terms for your particular card. A few banks charge a small fee for the service, though most offer it free to cardholders.
How to generate and use a virtual number
The steps differ slightly by bank, but the general process is the same. Open your card issuer's mobile app or website and look for the card management or security section. Select the option to generate a new virtual number. The app will display a complete card number, expiration date, and CVV code within seconds.
You can then use this number anywhere you would enter a regular card number online. Type it into the checkout form, or copy and paste it if the website allows. Some people save virtual numbers to digital wallets like Apple Pay or Google Pay for faster checkout on repeat purchases from the same merchant.
After you complete the purchase, the virtual number remains in your account history so you can see which merchant it was used for. If you set a spending limit when you created the number, the transaction will decline if it exceeds that limit. Once the number expires or you delete it, it cannot be used again, even if someone else obtains it.
When a virtual number protects you and when it does not
Virtual numbers are most useful when you are shopping at a merchant you do not fully trust or making a one-time purchase from a new website. Because the merchant never sees your real card number, they cannot use it later to charge you without permission or sell it to another company. If that merchant's database is hacked, the thief gets only the virtual number, which is already expired or limited to a small spending cap.
Virtual numbers do not protect you against all fraud. If you authorize a charge and then dispute it later, the merchant can still see the transaction—the virtual number just hides your card number from them. If you sign up for a subscription using a virtual number and forget about it, the merchant cannot charge you again once the number expires, but you will still need to cancel the subscription yourself to stop future attempts.
Virtual numbers also do not work for in-person purchases, ATM withdrawals, or phone orders where you have to read the number aloud. For those situations, you still need your physical card or real card number. They also do not help if you give out your information willingly to a scammer or if someone uses your identity to open a fraudulent account.
Virtual numbers versus other card security tools
Virtual card numbers are one layer of protection, but they work alongside other tools your bank offers. Purchase alerts notify you by text or email when a charge is made, so you catch fraud quickly. Fraud monitoring watches for suspicious patterns and can block a transaction before it goes through. Card locks let you temporarily freeze your card so no new charges go through, then unlock it when you need to use it again.
Some cards also offer zero liability protection, which means you are not responsible for fraudulent charges if you report them promptly. This protection applies whether you used a virtual number or your real card number. Virtual numbers are not a replacement for these tools—they work best as part of a complete security strategy.
If your bank does not offer virtual numbers, you can use a third-party service like Privacy or Blur, which generate virtual numbers for a fee or subscription. These services work similarly to bank-issued virtual numbers but are managed through a separate app rather than your bank's app.
Setting spending limits and managing virtual numbers
Most banks let you set a spending limit when you create a virtual number. This means you decide the maximum amount that can be charged to that number. If you are buying a $50 item from a new website, you might set the limit to $60 to account for tax and shipping. Any charge above that limit will be declined.
You can also name or label each virtual number in your account so you remember which merchant it was for. This makes it easier to track spending and spot unauthorized charges. Your account history will show the virtual number, the merchant name, the amount charged, and the date—just like a regular transaction.
If you want to stop using a virtual number before it expires, you can delete it from your account. Once deleted, it cannot be used again. If you suspect a virtual number has been compromised, delete it immediately and report the suspicious activity to your bank through the app or by calling customer service.
Frequently Asked Questions
Can I use a virtual card number for recurring charges like subscriptions?
Yes, you can use a virtual number to sign up for a subscription. However, once the virtual number expires, the merchant cannot charge you again because the number no longer works. You will need to update your payment method or cancel the subscription manually. Some people use this as a feature—they set a virtual number to expire after a few months to force themselves to review subscriptions they no longer want.
What happens if I dispute a charge made with a virtual number?
The dispute process is the same as with your real card number. You contact your bank and explain why you are disputing the charge. The bank investigates and either credits your account or sides with the merchant. The virtual number itself does not change how disputes work—it only hides your real card number from the merchant.
Do virtual numbers work with PayPal, Apple Pay, or other digital wallets?
Some do, but it depends on your bank and the wallet. You can save a virtual number to Apple Pay or Google Pay just like a regular card number. PayPal typically requires your real card number to link to your account, though some banks are starting to support virtual numbers there too. Check your bank's documentation or contact customer service to confirm what works with your specific setup.
Is there a limit to how many virtual numbers I can create?
Most banks do not set a hard limit, but some cap you at a certain number per month or per day. For example, one bank might let you create up to 10 virtual numbers per month. Check your card issuer's terms or app to see if there is a limit on your account.
What if a merchant refuses to accept a virtual card number?
Some older websites or payment systems do not accept virtual numbers because their systems are not set up to process them. If that happens, you will need to use your real card number or choose a different payment method. Virtual numbers work on most modern e-commerce sites, but not all.