Your AP clerk mails a $14,000 check to a supplier on Friday. By the following week, a washed and rewritten copy of that check is clearing your account for a much larger amount — and you find out only when the bank statement arrives. This is not a rare horror story. In the Association for Financial Professionals' 2025 fraud survey, 79% of organizations reported attempted or actual payments fraud, and checks were the most targeted method by far, hitting 63% of respondents. Meanwhile, that same $14,000 payment could have traveled as a single-use virtual card number that dies the moment the supplier charges it — earning you a rebate instead of an exposure.
Virtual cards are 16-digit card numbers that exist only as data: no plastic, no embossed name, no magnetic stripe. For accounts payable, they replace checks, bank-transfer (ACH) batches, and shared corporate card numbers with per-payment numbers that carry their own spending rules and their own paper trail. Here is how they work, what they earn you, and how a small finance team rolls them out without breaking vendor relationships.
What a Virtual Card Actually Is
A virtual card is a real card number issued from your business card account for a specific payment. It processes over the normal card networks, so any supplier that accepts credit cards can usually accept a virtual card with no new equipment or enrollment on their end.
What makes it different from handing a supplier your regular card number is control. When your AP system generates a virtual card number, it can lock that number down to:
- An exact amount, down to the penny — a $2,847.19 invoice gets a number authorized for exactly $2,847.19
- A single merchant — the number only works at the intended supplier
- A date window — valid for this week's payment run, then dead
- Merchant category codes — restricted to the supplier's line of business
There are two main flavors. Single-use virtual cards are valid for one authorization only: once the supplier charges the number, it becomes invalid and can never be reused. Lodge cards (sometimes called multi-use virtual cards) carry a standing credit limit and can be charged repeatedly, but never above the authorized ceiling. Lodge cards suit a handful of deeply trusted, high-frequency vendors. Single-use numbers are the default for everything else, because a number that can be charged only once, by one vendor, for one amount is nearly worthless to anyone who steals it.
Why AP Teams Are Switching
Fraud Protection That Checks Cannot Match
Every check you mail carries your routing number, account number, business name, address, and an authorized signature — everything needed to draft against your account. A single-use virtual card number carries none of that. It cannot be traced back to your bank account, and after its one authorized charge it is dead data.
This matters more every year. Check fraud keeps climbing even as check volume falls, because each remaining check is handled by teams with less practice spotting fakes. Industry analyses of virtual card adoption estimate that single-use numbers cut payment fraud risk by more than half compared with reusable payment credentials, because the window for reuse simply does not exist. For a small business without a treasury department watching disbursement accounts daily, removing the reusable credential is the cheapest fraud control available.
Controls That Replace Policy Documents
Most small businesses control spending with policy: approval thresholds in a handbook, spending rules in a wiki, a shared card number everyone promises to use responsibly. Virtual cards turn policy into plumbing. The number itself enforces the rule — wrong vendor, wrong amount, or expired window, and the authorization declines automatically.
That changes the approval conversation. Instead of reviewing a $3,000 charge after it posts and asking what it was for, you approve the invoice, the system mints a number locked to that invoice's amount and vendor, and the payment cannot drift. For recurring software subscriptions and ad spend — the categories where zombie charges hide — you can issue numbers with tight monthly caps and short expirations, so a forgotten free trial cannot bill you for a year.
Rebates That Turn AP From a Cost Center Into Revenue
Here is the benefit finance leaders find most surprising: virtual card programs typically pay rebates on spend, often with no minimum volume thresholds. A commonly cited figure is around 0.5% cash back on invoice payments — which means $5,000 back for every $1 million you route through virtual cards. On $400,000 of annual card-eligible payables, that is roughly $2,000 a year for paying bills you had to pay anyway.
Stack the card float on top. A check or ACH pulls cash the day it clears; a card payment gives you the grace period until the statement due date, letting you hold cash longer and collect early-pay discounts from suppliers when the math favors them. AP stops being purely overhead and starts contributing to the bottom line — the rare process improvement that shows up as income rather than savings.
Invoice-Level Reconciliation Without the Detective Work
Ask any bookkeeper what eats their month and the answer is matching: which payment covered which invoices, which partial payment belongs to which purchase order, why the deposit does not tie to anything. Virtual cards attack this directly. Each number is generated for a specific invoice (or invoice batch) and travels with rich remittance data — invoice numbers, purchase order references, project codes, cost center tags — that flows back into your ledger automatically.
Instead of one $25,000 ACH covering eleven invoices that someone must split by hand, you get eleven self-labeled payments that match themselves. The number of disputed entries drops, month-end close gets shorter, and the audit trail builds itself: every payment carries its who, what, and why from birth. Automated invoice processing runs about 60 to 70 percent cheaper per invoice than manual handling, and self-matching payments are a big part of that gap.
Faster Payments Your Vendors Will Notice
Suppliers get paid in days rather than in mail-float-plus-processing weeks, which shortens their collection cycle and improves their working capital. That goodwill is negotiable: vendors paid fast and reliably are more willing to extend terms, prioritize your orders in a crunch, and waive the occasional late fee. Some buyers even trade virtual card payment — which costs the supplier an interchange fee — for an early-pay discount that exceeds it, splitting the benefit. Either way, the payment method becomes part of the vendor relationship instead of friction inside it.
What Virtual Cards Cost (and the Vendor-Acceptance Catch)
For the buyer, virtual cards are usually cheap or free: no plastic to issue, mail, or replace, and most issuers earn their money from interchange rather than per-card fees. The real cost sits on the other side of the transaction. Suppliers pay card acceptance fees — typically 2 to 3 percent — which is why vendor acceptance is the entire ballgame.
Some suppliers refuse cards outright. Others accept them but add a surcharge or "convenience fee" that wipes out your rebate and then some. The rollout math has to be vendor by vendor:
- Supplier takes cards at no surcharge: route everything through virtual cards and collect the rebate.
- Supplier adds a surcharge below your rebate rate: still net positive, but monitor it — surcharges creep.
- Supplier adds a surcharge above your rebate rate: pay these invoices by ACH and keep the relationship smooth.
- Supplier refuses cards: ACH as before. Revisit yearly; card acceptance keeps spreading.
Never strong-arm a critical supplier onto cards. A 0.5% rebate is not worth a strained relationship with the vendor you cannot replace.
Rolling Out Virtual Cards in a Small Finance Team
1. Segment Your Vendors Before You Touch Anything
Export a year of payables and sort vendors into three buckets: already paid by card, card-eligible but paid by check or ACH today, and card-resistant (landlords, tax agencies, anyone who surcharges). Your quick win is the middle bucket — typically software, supplies, freight, and professional services. That list is your enablement campaign.
2. Ask Suppliers; Do Not Announce at Them
Supplier enablement fails when it reads as a mandate. Lead with what the vendor gains: payment in days instead of weeks, remittance detail attached to every payment, no more "which invoices did this check cover" phone calls. Offer to start with a single invoice as a trial. Most card-accepting vendors say yes once they realize nothing changes on their end — they enter a card number exactly as they would any other.
3. Keep Approvals in Front of Issuance
A virtual card number is trivially easy to generate, which is exactly why generation must stay behind your normal approval flow. Whoever approves the invoice approves the number; the AP system mints it only after approval. Set hard rules: single-use numbers default to exact-amount and single-merchant locks, lodge cards require a documented business case and a named owner, and nobody reuses a number "just this once" because a vendor lost the first one — reissue instead.
4. Map Every Number Into Your Books Cleanly
This is where virtual cards quietly upgrade your bookkeeping. Each number arrives with structured remittance data, so build the habit of recording the invoice references, project codes, and cost centers at payment time rather than reconstructing them at month-end. If you keep your books in plain text, a virtual card payment maps naturally to one transaction annotated with its metadata — vendor, invoice numbers, and authorization reference riding along as structured notes, so the payment explains itself years later. The Beancount documentation on structuring accounts shows how to set up expense hierarchies that make this kind of per-payment tagging pay off, and Fava's dashboards turn the tagged history into vendor and project spend views without a separate reporting tool.
5. Reconcile on a Weekly Cadence, Not a Monthly Scramble
Virtual card feeds settle fast, so review them fast. Once a week, confirm every issued number either settled for its exact authorized amount or expired unused, and chase any number still open past its window — an uncharged authorization usually means the vendor never processed the payment, which is an unpaid invoice wearing a disguise. Weekly review keeps the list short; monthly review turns it into archaeology.
Mistakes That Undo the Benefits
Paying through surcharges that exceed the rebate. A 3% convenience fee against a 0.5% rebate is a 2.5% donation. Check the net on every vendor annually, because fee schedules change silently.
Issuing one number for a whole vendor relationship. A single multi-use number shared across months of invoices recreates every problem of a shared corporate card: mystery charges, painful matching, and a credential worth stealing. Single-use is the point; use it.
Letting virtual spend bypass approvals. "It is just a card number" is how $400-a-month subscriptions multiply. If anything, the ease of issuance argues for tighter pre-approval, not looser.
Ignoring stale authorizations. Expired, uncharged numbers are usually harmless — but the underlying invoice is still unpaid. Every open number needs a resolution: settled, reissued, or deliberately voided with the invoice handled another way.
Forgetting the 1099 angle. Card payments are generally reported by the payment network rather than by you, which changes your information-reporting obligations versus checks and ACH. Confirm the current rules with your preparer before your first January on virtual cards, not during it.
Keep Your Payables (and Your Books) Under Control
Virtual cards compress three AP jobs — paying, controlling, and reconciling — into a single action: approve the invoice, mint the number, and let the payment carry its own documentation home. Less fraud surface than checks, real controls instead of policy promises, rebates on money you were spending anyway, and a reconciliation process that mostly runs itself.
As you modernize how money leaves the business, give the same attention to how it is recorded. Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data — no black boxes, no vendor lock-in. Get started for free and see why developers and finance professionals are switching to plain-text accounting.
