Virtual Card
What Is a Virtual Card? Definition and How It Works
Definition
A virtual card is a digitally issued payment card with a unique card number, expiry date, and CVV, generated for use in online or card-not-present transactions without a corresponding physical card. Virtual cards can be single-use (the card number is valid for one transaction only) or multi-use (valid for a defined merchant, spend category, or time period), and are widely used for B2B payments, travel expense management, and controlled employee spending.
How it works
A virtual card is issued by a card programme operator (typically an issuing bank, e-money institution, or corporate card provider) through a card issuance API. The issuer generates a unique 16-digit primary account number (PAN), expiry date, and CVV associated with the funding account. These credentials are delivered digitally, typically through a web portal, email, API response, or mobile application, rather than embossed on physical plastic.
The card is processed through standard card network infrastructure: Visa, Mastercard, or equivalent. Merchants accepting the virtual card at checkout treat it identically to a physical card number in a card-not-present environment. Authorisation, clearing, and settlement follow normal card processing flows.
Single-use virtual cards (sometimes called one-time use virtual cards or OTUVCs) are generated with a fixed amount and expire after one successful transaction. This eliminates the risk of a compromised card number being reused for subsequent fraudulent charges. Online travel agencies use single-use virtual cards to pay hotels: the card is generated for the exact booking value, charged once by the hotel at check-in, and then expired.
Programmable virtual cards allow fine-grained spending controls to be encoded in the card's authorisation rules: maximum transaction amount, permitted merchant category codes (MCCs), geographic restrictions, and validity windows. These controls are enforced at the issuer level on every authorisation attempt, providing more reliable spend control than post-hoc expense policy enforcement.
Why it matters
Virtual cards reduce fraud risk in card-not-present environments. A single-use virtual card number that cannot be reused after the transaction eliminates the primary exploit in card-not-present fraud: a stolen card number has zero value if it can only be charged once and has already been used. For B2B procurement and travel, this property significantly reduces the fraud surface relative to storing and reusing physical card numbers.
For enterprise accounts payable, virtual cards improve reconciliation accuracy. Each card is generated with a unique reference linking it to a specific purchase order or invoice, creating an automatic audit trail that connects every payment to its originating transaction. This eliminates the manual matching that characterises traditional corporate card expense reporting.
Virtual card issuance is a revenue opportunity for card programme operators. In B2B virtual card programmes, the card programme earns interchange on every transaction processed through the card. For travel management companies, online travel agencies, and corporate expense platforms, virtual card interchange revenue is a significant component of the economics.
With PXP
PXP accepts and tokenises virtual card payments within its standard card-not-present flow. Talk to our team about how PXP can support your virtual card acceptance.
Frequently asked questions
What is the difference between a virtual card and a digital wallet?
A virtual card is a payment card credential (PAN, expiry, CVV) that exists only in digital form, used directly in card-not-present transactions. A digital wallet (Apple Pay, Google Pay) stores tokenised versions of payment cards and presents them via NFC for contactless in-person payments or via in-app and web payment flows. Virtual cards are typically issued by a corporate card programme for specific use cases; digital wallets are consumer-facing products holding multiple existing cards in tokenised form.
Are virtual cards accepted everywhere physical cards are accepted?
Virtual cards are accepted wherever card-not-present transactions are processed: online checkouts, phone orders, and B2B payment portals. They are not usable for in-person chip-and-PIN or magnetic stripe transactions because they have no physical form factor.
How do single-use virtual cards prevent fraud?
A single-use virtual card is generated for a specific transaction amount and expires after one successful authorisation. Even if the card credentials are intercepted or stolen, they cannot be reused: any subsequent authorisation attempt will be declined by the issuer because the card has already been used. This eliminates the primary value of stolen card-not-present credentials, making single-use virtual cards highly effective for high-risk or uncontrolled payment environments.
Revolutionize your business with PXP
Take complete control of your commerce and payments with one platform.
Get Started