A white label debit card lets a fintech put its own brand on a card that draws from a customer’s account or wallet balance, while licensed partners provide the issuing permissions. It is one of the most common ways to add a spending product without becoming a card issuer. This guide covers what a programme involves, how the economics work, the compliance that applies and the steps to launch.
What a virtual card number is
A virtual card number is a card credential, made up of a primary account number, expiry date, and CVV, issued electronically and linked to a funding account or a physical card. It never needs to be printed. Some are permanent and reusable, others expire after one transaction or a set period.
Two forms are common:
- Reusable virtual cards, kept for a specific supplier or subscription.
- Single-use cards, generated for one purchase and discarded afterwards.
Because the number can be issued through software, businesses can create many programmatically and assign each to a person, project, or vendor.
How virtual card numbers work
Behind the scenes a virtual card number sits on the same card networks, such as Visa and Mastercard, as any physical card. When a customer pays, the number routes through the network to the issuer for authorisation, then settlement, exactly as a plastic card would.
The difference is in issuance and control. A card issuing platform provisions the credential on demand through an API, sets its spending rules, and maps it back to a funding source. Controls can include:
- A fixed spend limit or exact amount.
- An expiry window measured in minutes, days, or months.
- A lock to one merchant category or a single merchant.
- Currency and geography constraints.
Many virtual cards also support network tokenisation, where the real card number is replaced by a token when stored in a wallet or with a merchant. The token has no value outside the specific context it was issued for.
Common use cases
Virtual card numbers suit any situation where control and traceability matter more than a physical object.
- Online payments: a shopper generates a number for a website and avoids exposing the main account.
- Single-use checkouts: a fresh number per transaction limits exposure if a merchant is breached.
- Subscriptions: a dedicated number per service makes it easy to stop a renewal by cancelling the card, not the account.
- Employee and team spend: finance issues a card per person or per project with its own limit, then reconciles against it.
- Supplier payments: accounts payable issues a card matched to a single invoice and amount.
Each card produces its own transaction trail, which simplifies reconciliation and budgeting.
Security benefits
The security case rests on limiting what an attacker can do with stolen data. A single-use number is worthless once the transaction clears. A merchant-locked number cannot be used elsewhere. Spend limits cap the damage of any misuse.
Tokenisation adds a further layer. According to Visa, token-based transactions reduce online fraud compared with sharing the raw card number, because the token cannot be replayed outside its intended use. Combined with per-card controls, this narrows the window for card-not-present fraud, which is the dominant fraud type in online commerce.
Virtual cards also reduce internal risk. Because each card is scoped and logged, unusual spending is easier to spot, and revoking access means deactivating one credential rather than reissuing a whole account.
Virtual vs physical cards at a glance
| Attribute | Virtual card number | Physical card |
|---|---|---|
| Issuance | Instant, via software | Printed and posted |
| Use | Online, in-app, mobile wallet | In person and online |
| Controls | Per-card limits, expiry, merchant lock | Account-level, coarser |
| Exposure if leaked | Limited to that card's scope | Whole account at risk |
| Best for | Ecommerce, spend management, subscriptions | Point of sale, cash withdrawal |
Physical and virtual cards are not mutually exclusive. A single account can hold one physical card and many virtual numbers issued from it, so teams pick the format that fits each payment.
Where virtual cards fit in a wider stack
For a business launching cards, virtual numbers are usually the first product to ship, because they need no logistics. They pair naturally with a digital wallet that stores balances, and complement a white-label debit card programme that adds physical and reusable cards on the same account. Adding physical cards later reuses the same account and rules.
Bringing it together
Virtual card numbers give businesses fine control over how, where, and how much a card can spend, with less exposure than a shared physical number. Artha Fintech supplies the software layer for issuing and managing these programmes, while the card scheme and licensing sit with the client or a regulated infrastructure partner. Explore how this works on the Artha cards page.
Frequently Asked Questions
Are virtual card numbers safe to use online?
Yes, and often safer than typing a physical card number. Single-use and merchant-locked cards limit what a leaked number can do, and spending caps contain any misuse. They do not remove the need for other controls such as authentication, but they reduce exposure.
Can virtual card numbers be used in shops?
A virtual number added to a mobile wallet can be tapped at contactless terminals, so it works in many shops. Numbers meant only for online use cannot be swiped or inserted, since there is no physical card.
What is the difference between a virtual card and a tokenised card?
A virtual card is a separate credential with its own number, expiry, and CVV. Tokenisation replaces a card number with a token for storage, and can apply to either a virtual or a physical card. The two are complementary rather than alternatives.
How quickly can a business issue virtual cards?
Through an issuing platform with an API, a card can be created in seconds and used immediately. This is why virtual cards are common for just-in-time supplier payments and instant employee provisioning.
