What Is a Virtual Card Number
A virtual card number is a separate card number — its own PAN, expiry and CVV — that sits in your banking or wallet app instead of on plastic. Here is how the number, the CVV and tokenisation keep your real card off merchant servers.
Think of a virtual card number as a disposable alias for your real card: merchants see the alias, your account stays behind it. Combine it with wallet tokenisation and you double the separation.
The number is not your real card
A virtual card number is a distinct Primary Account Number (PAN) issued by your bank or wallet. Charges post to your underlying account, but the number a merchant stores is not the one on your physical card — so a breach there cannot be replayed against your real card.
Number, CVV and expiry
| PAN | The 16-digit number you type in at checkout. |
| CVV | Often dynamic (rotates hourly or per transaction) on bank virtual cards. |
| Expiry | Set by the issuer; virtual cards commonly expire 4–5 years out. |
Where the number lives
- Banking apps (e.g. Absa, FNB, Capital One, Citi) — a virtual card you create.
- Wallet apps (Apple Card, Apple Pay) — a number or device token.
- Click to Pay — a one-time number per checkout.
Tokenisation vs a virtual number
A virtual card number is still a card number; wallet tokenisation goes further by issuing a device-specific token that the merchant never maps back to your PAN. Both keep your real number off the merchant — tokenisation adds a second layer on top of the virtual number.
Frequently asked
What is a virtual card number?
A separate 16-digit card number issued by your bank or wallet, with its own CVV and expiry, that posts to your real account but is not the number on your physical card.
Is a virtual card number the same as a token?
No. A virtual number is still a card number; a wallet token (Apple Pay, Google Pay) is a device-specific reference the merchant cannot map back to your PAN. Tokenisation adds a layer on top.
Does a rotating CVV break saved cards?
No — the CVV is captured once at enrolment; later charges from the same merchant use the stored number and expiry, so renewals continue.
How VCCFinder builds the data
VCCFinder builds its picture from published documentation and issuer records, then publishes the recorded clear rate and decline reasons next to each range. Where a card declined, the reason sits in the BIN lookup rather than in a footnote here.