How Virtual Credit Cards Work
From a tap in your app to a decline message on the merchant's screen, step by step, with the places a payment actually gets stopped.
A virtual card has no plastic, but it travels the same path a physical one does. The difference is where the number came from and how much control you have over it once it exists.
The path a payment takes
Your card details reach the merchant, who sends an authorisation request through their acquirer to the card network. The network routes it to the issuer, which checks the balance or credit line, any account-level blocks and the address match, then returns a yes or no with a reason code.
The merchant sees only the yes or no. Most declines happen in the middle of that chain and reach you as a generic failure message, which is why the reason codes in our issuer tables matter when something declines twice.
Where virtual cards add control
Because the number is issued in software, you can lock it, reissue it and expire it without replacing anything. A number that leaks can be killed in seconds. That is the whole argument for using one on a store you have never bought from.
What it does not change is the underlying account. A virtual number on a card with no funds still declines, and one attached to a restricted merchant category still declines there.
The checks that cause declines
Address mismatch is the most common and the least obvious, because the address you entered months ago may no longer be what your bank has. Then currency, then merchant category blocks, then per-transaction ceilings, then the balance itself.
In rough order of frequency. When a checkout fails repeatedly on a card that worked elsewhere, the address line is the first thing to check.
Where to look when a payment fails
Every decline carries a reason code, and the merchant usually sees it even when you only get a generic message. If a payment fails twice on a card that works elsewhere, the address on your account is the first thing to check, because a change of address at the bank does not always update the card record.
Second on the list is the merchant's own rules on stored-value credentials, which no change on your side will fix. Third is a per-transaction or per-day ceiling, which the issuer will confirm. Rarely, a decline is a network-side block on the card's BIN, which is worth testing by trying the same card on a different merchant.
Frequently asked
Are virtual credit cards safer than physical cards?
For online use they usually are, because the number can be reissued or frozen instantly if it leaks. The account behind it still needs the same protection.
Why does my virtual card work on one site but not another?
Merchant category filters, address matching and per-transaction ceilings all vary by merchant. The network and the balance are the same everywhere.
Do virtual cards show up differently to merchants?
Not in a way you control. The merchant sees a normal card authorisation, though some acquirers treat the credential type differently for risk purposes.
Can a virtual card be used more than once?
It depends on the card. Single-use and disposable cards expire after one authorisation; standing virtual numbers behave like a normal card.