Virtual Card Issuing: A Complete Guide
What virtual card issuing is, how a card number becomes spendable, the parties involved in every transaction, and what you need to launch a programme of your own.
In short
A virtual card is a real card number with no plastic. It is issued against a funded balance, runs on Visa or Mastercard rails, and is authorised in the same milliseconds as any other card. This explains the whole chain, from issue to settlement.
A virtual card is not a lesser version of a physical card. It is the same object — a Primary Account Number, an expiry, a security code — minus the plastic. Merchants cannot tell the difference, because at the point of authorisation there is no difference to tell.
What virtual issuing changes is the economics of creation. A physical card has a unit cost, a fulfilment delay and an address to post it to. A virtual card has none of those, which makes things possible that were not: a card per subscription, a card per employee per month, a card issued the instant a user signs up.
What is actually in a card
Four pieces of data make a card spendable online:
| Field | What it is | Who sees it |
|---|---|---|
| PAN | The 15–16 digit account number. Its first digits identify the issuing bank. | The cardholder, at reveal |
| Expiry | Month and year the card stops working. | The cardholder |
| CVV / CVC | A code derived from the PAN and expiry, proving the card is in hand. | The cardholder, at reveal |
| Cardholder name | The name on the card. Some merchants check it against billing details. | Everyone |
Everything else — balance, limits, freeze state — lives on the issuer's side and is invisible to the merchant. That is why a frozen card and a card with no money look the same to a shop: both simply decline.
Who is involved in one transaction
A card payment has more participants than most people expect, and knowing them makes decline messages legible.
- The cardholder presents the card at a merchant.
- The merchant passes it to their acquirer — the bank or processor that handles their card takings.
- The network (Visa or Mastercard) routes the authorisation request to the issuer identified by the PAN.
- The issuer — or a processor acting for it — decides yes or no in a few hundred milliseconds, checking balance, limits and fraud rules.
- Settlement happens later, in batch. The authorisation reserves the money; settlement actually moves it.
The gap between authorisation and settlement is why a pending charge can differ from the final one — a restaurant authorising a bill and settling it with a tip added is the everyday example.
Prepaid, debit and credit
Virtual cards can be any of the three. The distinction is where the money comes from at authorisation:
| Type | Funded by | Risk to the issuer |
|---|---|---|
| Prepaid | A balance loaded in advance | Almost none — you cannot spend what is not there |
| Debit | A linked deposit account | Low — subject to the account balance |
| Credit | A line extended by the issuer | High — the issuer is lending |
Most virtual card programmes, including ON5, are prepaid. That is not a limitation so much as the reason they can be launched quickly: there is no underwriting, no credit risk to price, and no capital to hold against losses.
What a programme needs
Independently of who provides it, a working card programme has these components. If you are evaluating providers, this is the checklist of what someone must be doing:
- An issuing licence and a BIN — the right to put numbers on the network at all.
- A processor — the system that answers authorisation requests in real time.
- A ledger — an accurate, auditable record of every balance and movement.
- KYC and sanctions screening — knowing who holds the cards.
- 3-D Secure — step-up verification for online purchases that require it.
- Dispute and chargeback handling — a process for when a cardholder says a charge is wrong.
- Settlement and reconciliation — matching your records against the network's, every day.
On a card issuing network, all seven are the network's responsibility. On a sponsored programme, several become yours. Knowing which are which is the whole of a provider evaluation.
Where virtual cards genuinely win
- Controlled spend. Load exactly the amount a purchase should cost. A card with $40 on it cannot become a $400 problem.
- Per-purpose cards. One card per vendor or per subscription makes reconciliation trivial and cancellation surgical.
- Instant issue. A user who signs up can be spending in seconds, not in the five working days a posted card takes.
- Cheap disposal. If a number leaks, freeze it and issue another. There is no plastic to destroy and no postage to pay.
The honest limitations
- No cash withdrawal in most programmes. No plastic, no ATM.
- Some in-person friction. Virtual cards can be added to mobile wallets where the programme supports it, but a card that exists only as a number is an online instrument first.
- Merchant edge cases. A minority of merchants — car hire and hotels especially — pre-authorise large amounts or want a physical card present.
- Prepaid means prepaid. A declined transaction because a balance ran out is a support conversation, and designing top-up prompts well matters more than it sounds.
Issuing one on ON5
For a concrete example: fund an account with USDT or USDC, choose a card product — which determines whether the card is Visa or Mastercard — and issue with a load amount, a cardholder name and an email. The minimum load is $5. The cardholder gets a branded welcome email with their card rendered in the design you chose and the number masked to its last four digits.
The card is returned immediately but is not spendable for a moment: the network provisions the number after accepting the request. Treat "issued" and "usable" as two states and your support queue will thank you.
Frequently asked questions
What is a virtual card?
A virtual card is a real card number with an expiry and a security code, issued without a physical plastic card. Merchants process it exactly like any other card.
Are virtual cards accepted everywhere?
They are accepted anywhere the network is accepted for online and contactless payment. The exceptions are ATM withdrawals and a small number of merchants — car hire and hotels in particular — that expect a physical card.
What is the difference between prepaid, debit and credit cards?
Prepaid cards spend from a balance loaded in advance, debit cards from a linked deposit account, and credit cards from a line extended by the issuer. Most virtual card programmes are prepaid, which removes underwriting and credit risk.
What does a card programme need to operate?
An issuing licence and BIN, a processor, a ledger, KYC and sanctions screening, 3-D Secure, dispute handling, and daily settlement and reconciliation. On a card issuing network these are the network's responsibility.
Issue your first card on ON5
Fund an account with USDT or USDC and issue a branded Visa or Mastercard virtual card. The minimum is $5.
Open the dashboard