Multi-Use Virtual Card

A multi-use virtual card is a payment card that exists only as digital details, a card number, expiry date and security code, and that can be used for more than one transaction. It is issued by a bank or licensed card issuer, runs on a card network such as Visa or Mastercard and is accepted wherever that network's cards are accepted online, by phone or through mobile wallets. Businesses use multi-use virtual cards to pay recurring suppliers and subscriptions or to give an employee or team a dedicated card for a budget, while consumers use them to separate subscriptions from their main card.

Multi-use virtual cards are one type of virtual card. They sit between a traditional plastic card, which can be used anywhere for years, and a single-use card, which is valid for one payment only. The issuer can attach controls that limit where, when and how much the card can be used, giving much of the security of a single-use card with less administration for repeated payments.

A card programme administrator, often a company's finance team using a bank portal or a spend management platform, requests a new card through the issuer's system or an application programming interface. The issuer processor generates a card number from the issuer's range, applies the requested controls and returns the details instantly. The card can then be shared with the supplier, stored with an online merchant or added to a mobile wallet.

When the card is used, the authorisation request travels through the card network to the issuer like any other card payment. The issuer checks the controls before approving. Typical controls include:

• Merchant lock. The card works only with a named merchant, or with merchants in specified merchant category codes.
• Spending limits. Caps per transaction, per month or over the card's lifetime.
• Validity window. Start and end dates, after which the card stops working.
• Usage count. A maximum number of transactions, so a card can be set to work for a fixed number of instalments.
• Geography and channel. Restrictions to certain countries or to online use only.

In commercial payments, multi-use virtual cards are issued as part of commercial card programmes. Common uses include:

• Supplier payments. A company gives a regular supplier a dedicated card that it charges for each invoice, replacing cheques or bank transfers within the accounts payable process.
• Software subscriptions. Each software service gets its own card, so the finance team can track spend by vendor and cancel a card if a subscription ends.
• Team and project budgets. A department, event or project receives a card with a budget cap, replacing shared plastic cards or expense claims.
• Travel and media buying. Agencies and travel managers use cards tied to particular hotels, airlines or advertising platforms.

Each transaction carries data that can be matched automatically to a purchase order or cost centre, which simplifies reconciliation. Companies may also earn rebates from the issuer, funded by the interchange fee on commercial card transactions.

Some banks and fintech apps let consumers create multi-use virtual cards for online shopping and subscriptions. A consumer might use one card for streaming services and another for an online store, so that if one merchant suffers a data breach only that card needs to be replaced. Merchant-locked cards also make it harder for a subscription to keep charging after the consumer has frozen the card. Many such cards are used as card-on-file credentials for recurring payments.

Because a multi-use virtual card can be locked to one merchant and given a spending cap, stolen details are of limited value to fraudsters. The card never exists in physical form, so it cannot be skimmed at a terminal or lost in the post. If compromise is suspected, the card can be cancelled and replaced instantly without affecting other cards. These benefits complement network tokenisation, in which merchants store a token in place of the card number.

Not every supplier accepts cards, and some add a surcharge or ask for a higher price because of card acceptance costs. Hotels and car rental companies may ask for a physical card at check-in, which can make virtual cards awkward for travel. Restrictive controls can cause legitimate payments to be declined, for example when a supplier's payment provider uses a different merchant name or category from the one expected. Managing large numbers of cards also needs good tooling, which is why many businesses use spend management platforms that issue and track cards automatically.