Controlled payment number
A controlled payment number (CPN), also called a disposable or virtual credit card, is a temporary card number that acts as an alias for your real card. It has a limited number of uses and an expiration date (typically 2–12 months from issue). The merchant sees only the CPN, not your actual card number.
How it works
- Generated by a web application or a specialized program connected to the card issuer.
- Linked to your real card but used for a specific transaction or merchant.
- Can be set for a single merchant or a few transactions, limiting potential fraud if it’s compromised.
- If the CPN is stolen, only the limited tied funds are at risk, protecting the real card.
What it’s called
- Also known as substitute credit card number, one-time use credit card, disposable credit card, or virtual card number (VCN). The term “controlled payment number” is a trademark of Orbiscom.
- In many places, banks and networks offer their own versions, such as MasterCard’s inControl system, and issuers have used names like ShopSafe or Virtual Account Numbers.
Examples and history
- MasterCard bought Orbiscom’s system in 2009 and integrated it with its platform.
- Bank examples include Bank of America’s ShopSafe (now discontinued) and Citibank’s Virtual Account Numbers.
- International examples include MBnet in Portugal.
- Some programs have been discontinued over the years (Discover’s Secure Online Account Numbers ended in 2014; other services from Ivobank, Cahoot, PayPal, Neteller, etc., have also ended).
Virtual card numbers (VCC)
- A virtual credit card number is a 16-digit number used for online purchases, not for in-person use.
- It is not tied to a physical card for in-store payments.
- Often requires funds to be deposited into an account linked to the VCN before use.
- Can be obtained from online VCN providers, banks, or partners of Visa/MasterCard, sometimes with service fees.
- A VCN includes a card number, a security code (CVV/CVC), and an expiration date. These cards usually expire quickly (for example, after about 60 days) to boost security and limit exposure.
Why it’s used
- The main goal is to reduce fraud in online transactions by keeping the real card number private.
- Quick turnover of virtual numbers helps minimize the window for misuse.
This page was last edited on 3 February 2026, at 20:14 (CET).