Virtual Credit Card Numbers: How They Work and Are They Safe

Independent guide - not affiliated with or endorsed by Capital One or any other card issuer named here. Virtual card features differ by issuer and by card; check your issuer's app or website for what your account supports.

A virtual credit card number is a substitute card number linked to your real credit card account. You give it to online merchants instead of the number printed on your card. Purchases land on your normal statement and earn your normal rewards, but if the virtual number leaks, you can lock or delete it without replacing your physical card. Not every issuer or card offers them, and they are mainly for online shopping.

What is a virtual credit card number?

It is a separate 16-digit number, with its own expiration date and security code, that the issuer generates for your existing credit card account. It is not a new line of credit and does not need a new application. Charges made with it draw on the same credit limit, appear on the same statement and are paid with the same payment.

Capital One, for example, describes its virtual cards as a way to shop online without sharing your physical card number. It says you can create multiple merchant-specific virtual cards that can only be used at the designated website, that you still earn your card's rewards on those purchases, and that you can lock or fully delete a virtual card without affecting your credit card account. It also notes that virtual cards are not available for debit cards and some credit cards, are generally meant for online use, and may not be accepted by every store.

Other issuers offer similar tools under different names, sometimes with single-use numbers, spending caps or expiration dates you choose. Look in your card's app or online account under security, payment tools or card management, or ask the issuer whether your card is eligible.

How do virtual card numbers protect you?

The main benefit is containment. Online stores keep card numbers on file, and those files are a target for data breaches. If a breached merchant only ever had a virtual number, the thief has a number that you can switch off in seconds, and your physical card, your other subscriptions and your other stores keep working.

• Merchant-locked numbers are useless at other websites, so a stolen number cannot be spent elsewhere.
• Separate numbers per store make it easy to see which merchant leaked your details if fraud ever appears.
• Locking or deleting one number avoids the hassle of a new physical card and updating every account that stores your card.

Your legal protection is strong either way. Under Regulation Z, your liability for unauthorized use of a credit card is capped at the lesser of $50 or the amount obtained before you notify the issuer, and the official commentary says no liability may be imposed when a thief uses only your account number, without the physical card, for phone or internet orders. Virtual numbers do not change those rights; they reduce how often you need to use them and how much cleanup a breach causes. Our guide on what to do if your credit card is stolen covers the reporting steps if fraud does happen.

Are virtual card numbers safe?

Yes, they are at least as safe as your regular card number and usually safer for online shopping, because the real number never leaves your issuer. The risks are practical rather than security-related:

• Returns and refunds go back to the number you paid with. Policies on refunds to a deleted number vary, so keep the number active until returns are settled, and ask your issuer if a refund does not appear.
• Hotels, car rentals and ticket pickups may ask to see the physical card you paid with. A virtual number may not work for purchases that require a card in hand.
• Recurring bills fail if you lock or delete the number they use, which can lead to late fees with that merchant. Update the payment method first.
• Phishing still works on people. A virtual number does not stop someone from tricking you into logging in to a fake bank site. Type your issuer's address yourself, and see our guide to card activation call and text scams.

Do virtual card numbers stop free trial charges?

They can stop the charge from going through, but they do not cancel the subscription. If you sign up for a free trial with a merchant-specific virtual number and then lock it, the renewal payment will likely be declined. The merchant may still consider you subscribed, keep trying to bill you or send the account to collections under its terms. Cancel the subscription through the merchant first, then lock the number as a backstop.

If a merchant charges you after you cancelled, you can dispute the charge with your issuer. Our guide on how to dispute a credit card charge explains the timeline and what records to keep.

How do you get a virtual credit card number?

1. Check eligibility. Look in your issuer's app or website for virtual card or virtual number options, or ask the issuer. Not every card qualifies; some issuers offer the tool only on certain products.
2. Create the number from the account you want to charge. With Capital One, the issuer says you select the option to get a virtual card from the account in its app; other issuers use a similar menu.
3. Name it after the merchant so you know where it is used.
4. Save it in the merchant's checkout instead of your physical card number.
5. Manage it from one place. Lock it if you stop using the merchant, delete it once refunds and returns are finished, and check your statement each month.

Virtual card numbers vs debit cards for online shopping

If you shop online with a debit card today, switching to a credit card is the bigger security upgrade, virtual number or not. With a debit card, stolen money leaves your checking account while the bank investigates; with a credit card, you dispute a charge you have not paid yet. Our credit card vs debit card guide compares the protections in detail. A virtual number on top of a credit card then limits the damage from any single merchant breach.

Prepaid and debit-only users have fewer virtual options, and Capital One notes that its virtual cards are not available for debit cards. If you use a prepaid card for online spending, our prepaid cards hub explains what protections those accounts carry.

When a virtual number is worth setting up

It is worth a few minutes for any merchant that stores your card for repeat purchases, any smaller online shop you do not know well, and any free trial or subscription you might forget. For everyday tap-to-pay in stores, mobile wallets typically pass a device-specific number rather than your card number, so there is less to gain. Combine virtual numbers with transaction alerts, pay your statement in full, and review it each month: that combination catches most problems before they cost you anything.