Which Virtual Credit Cards Offer the Best Security and Flexibility?

[jymbee]

I now use a "Virtual" card on line

Until a recent thread here I haven't paid much attention to Virtual CC other than being aware of their existence. Reading more since then it seems they do offer an extra layer of security so I'm curious as to what VCCs folks here are using? Given Google has pretty much taken over my life, thinking about using Google Pay as an option.

 

[Jackiemac]

I use Google pay and wallet they
store several of my card details. I find it works well.

There's may be a spend limit depending on your card provider.

 

[John From Detroit]

Google pay works the "Virtual" card I use for most online work (Including Google wallet)
Is a "real" credit card, only there is no actual card.. But you enter 16 + 3 + 5 digits just like you would read off a piece of plastic.

 

[TheBar]

Apple Pay, Google Pay, and PayPal have their place and I use them where no other payment option is available like my utility bills. But they are not a virtual CC. Your info can be intercepted and reused by a hacker or a crooked vendor.

The big advantages of a virtual card is being as close as you can get to secure. Depending on the issuing bank they can be a one-time only use, or can only used by 1 vendor, or by setting a date like tomorrow for expiration. Each time a new virtual set of numbers are created.

A virtual card can be used on ANY website that takes credit cards. I use.Eno from Capital One is an extension you add to your internet browser on your PC or phone. When a credit card is required you just click the icon on the browser toolbar. On most websites it automatically fills in all the CC info or you press a button to copy the info.

 

[jymbee]

Apple Pay, Google Pay, and PayPal have their place and I use them where no other payment option is available like my utility bills. But they are not a virtual CC. Your info can be intercepted and reused by a hacker or a crooked vendor.

Now I'm confused. Some of my searches in trying to learn more I came up with the below: ("usually cannot be reused"?)

>>>>>>>>>>>>>>>>>>>>>>>>>>

How Google Pay protects transactions​

When you pay with Google Pay (tap-to-pay or in-app):
1. Tokenization

• Your real card number is never sent to the merchant.
• Google Pay creates a temporary virtual card number (token) tied to that specific device.
• Even if someone captured that token, it usually cannot be reused.

2. One-time cryptograms

• Each payment generates a unique security code.
• That code works for that transaction only.
• Replaying it later will fail.

3. Device authentication

• The transaction requires fingerprint, face unlock, or passcode.

4. Secure hardware

• Payment credentials are stored in a secure element or encrypted environment on the phone.

 

[TheBar]

Now I'm confused. Some of my searches in trying to learn more I came up with the below: ("usually cannot be reused"?)

>>>>>>>>>>>>>>>>>>>>>>>>>>

How Google Pay protects transactions​

When you pay with Google Pay (tap-to-pay or in-app):
1. Tokenization

• Your real card number is never sent to the merchant.
• Google Pay creates a temporary virtual card number (token) tied to that specific device.
• Even if someone captured that token, it usually cannot be reused.

2. One-time cryptograms

• Each payment generates a unique security code.
• That code works for that transaction only.
• Replaying it later will fail.

3. Device authentication

• The transaction requires fingerprint, face unlock, or passcode.

4. Secure hardware

• Payment credentials are stored in a secure element or encrypted environment on the phone.

They are more secure than using your real credit card but Apple Pay, Google Pay, and PayPal can all be hacked. This article explains using a virtual card is more secure.A virtual card can be used on ANY website that takes credit cards.

 

[jymbee]

They are more secure than using your real credit card but Apple Pay, Google Pay, and PayPal can all be hacked. This article explains using a virtual card is more secure.A virtual card can be used on ANY website that takes credit cards.

If you build the safest, most secure home possible that incorporates state-of-the-art protection systems, then give the key to the front door to someone unknown to you, well...

My point being that:

Most secure sites and institutions are primarily hacked by targeting human psychology rather than technical defenses, with over 90% of attacks originating from social engineering, such as phishing, to steal credentials.​

The source of the vulnerabilities described in the article you posted are also attributed not to any weakness in the soft/hardware but rather getting users to hand over the keys so to speak:

These phishing sites prompt unsuspecting users to enter their payment card credentials, including sensitive details like the card number, expiration date, CVV/CVC code, and the OTP generated for ownership verification.​

Fascinating article nonetheless-- thanks for the link. Reading through that site is a bit scary when you realize that never ending Whack-A-Mole battles going on between developers and the crooks.

 

[TheBar]

My point was a virtual card has nothing to steal by phishing or by a virus on your PC or phone. And a virtual card is accepted at any site that accepts a credit card. And if you use a service PayPal is accepted at more than twice as many places than Google.

 

[jymbee]

My point was a virtual card has nothing to steal by phishing or by a virus on your PC or phone. And a virtual card is accepted at any site that accepts a credit card. And if you use a service PayPal is accepted at more than twice as many places than Google.

Thanks. Yep, I'm still learning about virtual CCs. I've not paid that much attention to this point as I very rarely have issues with the cards I use, but the more one knows...

I did read that there while most do accept virtual cards as you pointed out, there are some vendors that choose not to for whatever reason. But very few.

I was at a store awhile back and arriving at the checkout found I did not have my wallet & CCs. Fortunately I had enough cash but it felt pretty weird counting out paper money not having done that in so long!

 

[Edd505]

PayPal linked to Discover card 2% back on all purchase.