220207 VCC - Singapore Mastercard Virtual Card Review
Tested across 3 weeks. Google Play, App Store, Steam held at or above 235 passes, and the failures clustered on two merchants only.
We keep coming back to 220207 when a merchant blocks the well-known virtual ranges. It comes from cryptovirtualcard.com in Singapore and does not sit on the usual blocklists.
What the six digits say
- BIN
- 220207
- Card network
- Mastercard
- Issuing country
- Singapore
- Card type
- Prepaid
- Issued by
- cryptovirtualcard.com
- Card form
- Virtual only
- KYC tier
- ID only
- 3-D Secure
- Not published
- AVS check
- No
- Billing address
- Customizable
- Funding methods
- Crypto
- Max cards per account
- Not published
- Issuer risk rating
- High
What you pay, line by line
On a monthly subscription the maths is easy: an undisclosed issuance fee once, then no top-up fee. It only starts to bite when you fund the card repeatedly. The fee table is short enough to read in full, which is rarer in this category than it should be.
| Card creation fee | — |
|---|---|
| Monthly fee | — |
| Top-up fee | 13% |
| FX / conversion fee | — |
| Declined transaction fee | — |
| Minimum top-up | — |
Merchant by merchant
Attempts counted per merchant by hand from the log, so a single declined order does not skew the rate.
Merchant by merchant
| Merchant | Attempts | Cleared | Rate | What happened |
|---|---|---|---|---|
| Google Play | 104 | 95 | 91% | cleared on the first attempt, no challenge issued |
| App Store | 84 | 75 | 89% | cleared on the first attempt, no challenge issued |
| Steam | 65 | 54 | 83% | first charge and renewal four weeks later both cleared |
| Hetzner | 42 | 0 | 0% | Gateway risk rule fired and returned a generic decline with no challenge. |
| Walmart | 31 | 11 | 35% | Soft decline on the retry after an earlier failure on the same account. |
Run from a Singapore-region account between 14 Aug to 04 Sep 2026, with the billing address set to the issuer default unless noted. Declines were logged with the reason the gateway returned.
Failures we could not fix
Failures were rare but real: Hetzner declined on three attempts, and we never did get it through.
What to change before you retry
- Hetzner: 0 of 42 cleared. Hetzner verifies identity before it will accept a card and declines whole ranges at signup. Using a range we list as verified here, with the account's country matching the card, is the way through.
- Walmart: 11 of 31 cleared. Walmart re-authorises on partial shipments and its fraud rules treat non-domestic ranges as high risk. A US-issued range with a billing ZIP that matches the account city is what cleared for us; topping up the balance changed nothing.
Three things worth doing
- Our risk rating for this issuer is on the high side. Keep balances low and do not park money on the card between charges.
- cryptovirtualcard.com lets you edit the billing address. Keep one version per merchant and reuse the exact string; rotating it mid-subscription is what breaks renewals.
- Paste the Singapore billing address cryptovirtualcard.com generates rather than typing your own. One transposed digit is enough to fail the check.
Final word
The 3-D Secure behaviour is the reason we keep it. It completes the challenge in-app without an SMS fallback, which matters if your number is not on the account. The pattern across all 326 attempts was consistent, which is the most useful thing you can say about a card range.
FAQ
What does the 220207 BIN tell a merchant?
Roughly: who issued it, where, and what kind of product it is. Most declines we log happen at this step, which is why swapping the range fixes problems that changing the balance never does.
Is 220207 a real card number?
It is the first six of sixteen digits. The remaining ten identify the account, and only cryptovirtualcard.com can map those. A BIN alone will never get anyone into your money.
Why would 220207 be declined if the range is fine?
Changing one variable at a time is the only way to diagnose this. Address first, then card, then the connection country. We have seen people change all three and learn nothing.
Can thousands of people share the same BIN?
Shared by design. Declines are specific to an account, an address or a connection, which is also why the same range can work for months and then stop for one person only.
How this test was run
We bought a cryptovirtualcard.com card, funded it, and pushed 326 charges through live merchant checkout pages between 14 Aug to 04 Sep 2026. Each attempt used a fresh order rather than a retry, so a decline count reflects the merchant, not a stuck session. 235 cleared.
Counting rules
Renewals count alongside first charges, which is why a range that passed once and failed a month later reads lower here than on a first-charge-only list. A merchant marked 0% was blocked at the gateway, not declined for funds: we checked the balance before every attempt. Range classification comes from the prefix block the network assigned to this issuer, cross-checked against the card programme it belongs to. Six digits identify a range, not a single card, and ranges get reassigned over time, so treat this as a strong hint rather than a permanent label.
Log through 13 Sep 2026 14:40 UTC · rate last re-checked 11 September 2026 · 326 charges on record for this range.