What a virtual card is and how it works
A virtual card is a temporary card number generated by your bank or payment app that works like a regular debit or credit card but exists only in digital form. You receive a 16-digit card number, expiration date, and CVV code—but no physical plastic arrives in the mail. The number is tied to your real bank account or credit line and processes payments the same way a traditional card does.
Virtual cards are created on demand, usually through your bank's mobile app or website. Some banks generate them automatically when you shop online; others let you create one manually before you make a purchase. The card number is temporary—it expires after a set period (often 12 months) or after a single transaction, depending on your bank's rules. This means if a merchant's system is breached, the stolen number is already useless.
Key Takeaways
- Virtual card numbers are generated by your bank through its app or website and work like regular card numbers for online and in-person payments.
- You enter the virtual card number, expiration date, and CVV into the payment form exactly as you would a physical card.
- The transaction processes through the same payment network (Visa, Mastercard, American Express) as a regular card and appears on your bank statement under the merchant's name.
- Virtual cards expire after a set time or single use, so a stolen number cannot be used again—this is their main security advantage over physical cards.
- If a payment fails, check that the card hasn't expired, the number is entered correctly, and the merchant accepts the card network your virtual card uses.
How to generate a virtual card number
The process varies by bank, but most follow the same basic steps. Log into your bank's mobile app or website and look for a section labeled "Virtual Cards," "Digital Wallet," "Card Controls," or "Secure Shopping." Some banks put this under settings; others have it as a main menu option. Click the button to generate a new card.
Your bank will ask you to set limits on the card before it's created. You can usually set a spending cap (for example, $500), a merchant category (groceries only, gas only), or a time limit (valid for 30 days). These controls prevent the card from being used beyond what you authorize. Once you confirm, the bank generates the number instantly and displays it on screen. Write down or screenshot the number, expiration date, and CVV before you leave the page—some banks don't show the full number again.
If your bank doesn't offer virtual cards, you can use a third-party app like Privacy, Blur, or your payment processor's virtual card tool. These apps generate numbers tied to your bank account or credit card and work the same way as bank-issued virtual cards.
Entering the virtual card number at checkout
When you're ready to pay, enter the virtual card number into the payment form exactly as you would a physical card number. The form will ask for four pieces of information: the 16-digit card number, the expiration date (month and year), the CVV (three digits on the back), and your billing address. Copy each detail carefully from your bank's app or your screenshot.
Virtual cards work on any merchant website or app that accepts the card network your virtual card uses—Visa, Mastercard, or American Express. If the merchant's payment form rejects the number, check that you've entered it correctly, the card hasn't expired, and the merchant accepts that card network. Some merchants also require the billing address to match your bank account address exactly, so verify that before you submit.
For in-person payments, you cannot use a virtual card at a physical store because there's no physical card to swipe or tap. However, some banks let you add a virtual card number to a digital wallet (Apple Pay, Google Pay, Samsung Pay) and then use that wallet to pay in person. Check your bank's app to see if this option is available.
What happens after you submit the payment
Once you enter the virtual card number and submit, the payment processes through the same system as a regular card. The merchant's payment processor sends the transaction to your bank's payment network (Visa, Mastercard, or American Express), which verifies the card is valid and has sufficient funds. This usually takes a few seconds to a few minutes.
If the payment is approved, the merchant receives confirmation and your order is placed. The transaction appears on your bank statement under the merchant's name within one to three business days, depending on your bank. The virtual card number itself is now either expired (if it was single-use) or still active but tied only to that merchant (if your bank restricts it that way).
If the payment is declined, you'll see an error message on the merchant's website. Common reasons include insufficient funds, an expired card, an incorrect CVV or billing address, or the merchant not accepting that card network. Check your bank account balance, verify the card details, and try again. If it still fails, contact your bank to ask whether the card is active and whether there are any blocks on it.
Disputing a virtual card charge
If you see a charge on your statement that you didn't authorize, or if a merchant charged you twice, you can dispute it with your bank the same way you would dispute a physical card charge. Log into your bank's app or website, find the transaction, and select "Report as Unauthorized" or "Dispute This Charge." Your bank will ask you to describe the problem and may request documentation (like an email confirmation showing a different amount).
The bank then contacts the merchant's bank and requests a reversal. This process typically takes 10 to 30 days. During that time, your bank may provisionally credit the amount back to your account while the dispute is being investigated. If the merchant can prove you authorized the charge, the bank will remove the credit and you'll owe the amount again.
Virtual cards actually make disputes easier in some cases: because the number is temporary, a merchant cannot charge it again after the dispute is filed. This prevents repeated unauthorized charges from the same merchant.
When a virtual card payment fails
Virtual card payments fail for the same reasons physical card payments do. The most common cause is an expired card number—if your virtual card was set to expire after 12 months or a single transaction, and you're trying to use it again, the payment will be declined. Check your bank's app to see when the card expires and generate a new one if needed.
The second most common cause is an incorrect entry. Virtual card numbers are long and easy to mistype. Copy and paste the number from your bank's app rather than typing it by hand. Also verify that the expiration date and CVV match what your bank shows—some people accidentally use their physical card's CVV instead of the virtual card's.
A third cause is insufficient funds. Your virtual card is linked to your bank account or credit line, so if your account balance is too low or your credit limit is maxed out, the payment will be declined. Check your account balance before you try again.
If the card details are correct and your account has funds, the merchant's payment processor may not accept that card network. Some smaller merchants or international sites only accept Visa or Mastercard, not American Express. If your virtual card is American Express and the merchant doesn't accept it, you'll need to use a different payment method.
Security and fraud protection with virtual cards
Virtual cards reduce fraud risk because the number is temporary and tied to specific limits you set. If a merchant's database is hacked and your virtual card number is stolen, the thief cannot use it—the number has either already expired or is restricted to that merchant only. This is a major advantage over physical cards, where a stolen number can be used at any merchant until you report it.
Your bank's fraud protection still applies to virtual card transactions. If an unauthorized charge appears on your statement, you can dispute it and your bank will investigate. Most banks offer zero-liability protection, meaning you won't be held responsible for fraudulent charges if you report them promptly.
Virtual cards do not protect you from merchant scams—if you intentionally send money to a scammer, the transaction is authorized and cannot be reversed. They also don't protect you if you give your virtual card details to a phishing website. Use the same caution with virtual cards as you would with physical cards: only enter the number on secure websites (look for "https://" in the URL), never share it in an email or text, and verify the merchant is legitimate before you pay.
Frequently Asked Questions
Can I use a virtual card for recurring payments like subscriptions?
Yes, but only if your bank's virtual card doesn't expire after a single transaction. If your bank generates single-use cards, you'll need to generate a new number each time the subscription renews, which defeats the purpose. Check your bank's settings to see if you can create a virtual card that stays active for multiple charges. Some banks let you set this when you generate the card.
What if the merchant asks for a billing address and it doesn't match my bank account?
Enter the address that matches your bank account, not the shipping address. The billing address is verified against your bank's records, not the merchant's shipping system. If you enter a different address, the payment will likely be declined. If you've moved and your bank account address is outdated, update it in your bank's app before you try the payment again.
Do virtual cards work internationally?
Yes, virtual cards work on international merchant websites and apps as long as the merchant accepts the card network (Visa, Mastercard, or American Express). However, international transactions may incur foreign exchange fees or currency conversion charges, depending on your bank. Check your bank's fee schedule before you use a virtual card overseas.
Can I add a virtual card to Apple Pay or Google Pay?
Some banks allow this, but not all. Log into your bank's app and look for an option to add a card to your digital wallet. If your bank supports it, you can add the virtual card number to Apple Pay, Google Pay, or Samsung Pay and then use the wallet to pay in person or online. This is the only way to use a virtual card for in-person purchases.
What happens if I lose my phone and my virtual card details are on it?
Virtual card details stored in screenshots or notes are at risk if your phone is lost. However, the card number itself is temporary and tied to your bank account, so a thief cannot use it without your bank's verification. Log into your bank's app from another device, check for any unauthorized transactions, and generate new virtual cards if needed. Your bank can also freeze or cancel the old card immediately.