How Virtual Cards Change Payment Controls for Business AP

Global B2B virtual card payments will reach $14.6 trillion by 2029, accounting for 83 percent of all virtual card spend, per Juniper Research's forecast. The growth is not consumer fashion. It is accounts payable departments converting supplier payments into card transactions to gain controls — and rebates — that a check or ACH file cannot deliver.

Nuv Media publishes information, not financial advice.

How does a virtual card payment actually work?

A virtual card is a card number generated for a specific payment, delivered to the payer digitally, and settled over ordinary card rails. In a B2B payment, the AP platform or issuing bank creates a 16-digit PAN with its own expiry and security code, attaches the payment's controls, and transmits it to the supplier — by email, supplier portal, or a direct push into the supplier's card processing.

The supplier charges the number like any card transaction. The payer's company pays one consolidated card bill; the supplier settles in one or two days over card rails; and the payment carries remittance detail — invoice numbers, PO references — alongside the money, which is precisely what B2B check payments never managed.

What is a single-use PAN good for?

A single-use PAN is the strictest form of virtual card: it authorizes one amount, for one merchant, within a defined window, and then dies. Because the number is worthless after settlement, its theft has almost no resale value — a stolen static card number can be replayed for months, while a single-use number cannot authorize a second charge.

The control runs deeper than theft prevention. Because authorization happens over card rails, the limits are enforced by the network itself at the moment of the charge, not by after-the-fact policy. A number capped at $8,500 for one supplier declines any attempt to charge $9,000, with no AP reviewer involved.

What are ghost cards and subscription controls?

A ghost card — sometimes called a virtual account number — inverts the single-use model. Instead of one number per payment, the company assigns one persistent number to a supplier or a department, and every charge that supplier makes flows through it. Utility bills, recurring deliveries, and field purchases concentrate onto a card number that finance can cap, monitor, and switch off centrally.

That switch-off is what makes ghost cards the natural instrument for subscription control. A SaaS renewal the company wants to end is stopped by deactivating the number — no cancellation portal, no vendor cooperation required. Conversely, subscriptions the company keeps can be locked to a single merchant identifier so the number declines anywhere else, closing the quiet channel where vendor terms drift upward or data leaks begin.

What spend controls can AP actually enforce?

The control set is set at issuance, and the card network enforces it in real time. Typical parameters include per-transaction and cumulative dollar limits, monthly caps, activation and expiration windows, merchant category blocks, and merchant locks that bind a number to one seller.

Compared with the alternatives, the difference is enforcement timing. ACH and checks enforce nothing at the moment of payment — controls live in approval workflows before the file is sent. Card-based controls act at authorization, after the supplier attempts the charge, which catches the charges no workflow anticipated.

How does the rebate economics work for AP?

Every card payment generates interchange paid by the supplier's side of the transaction. Virtual card issuers return a negotiated share of that interchange to the paying company as a rebate that scales with volume. For AP departments with large monthly payables, the rebate functions as a payment-stream revenue line — which is why issuers market virtual cards with the rebate pitch first and the controls pitch second.

The economics are not free. Suppliers pay card acceptance costs on virtual card volume, and large suppliers with leverage negotiate the practice away or demand pricing adjustments, so a virtual card program usually concentrates among small and mid-sized suppliers. The program's net value depends on rebate rates, supplier acceptance, and what the company pays for the AP platform itself — a calculation finance teams run before, not after, conversion.

Where do virtual cards sit beside ACH and checks?

Most AP departments run a portfolio, not a single rail. Checks persist where suppliers lack card acceptance; ACH carries the large, repeated payments to suppliers that negotiate away card acceptance fees; virtual cards take the mid-market volume where rebates, controls, and supplier acceptance overlap.

The decision usually prices out per supplier rather than per company. A supplier paid monthly by ACH at negligible cost stays on ACH unless control or speed problems justify conversion. A long tail of small suppliers on net-30 terms converts cleanly, because the rebate on converted volume pays for the program while authorization-time controls replace manual review. The result is a payables operation that steers each invoice to the rail that handles it cheapest — with virtual cards claiming the share where their economics clear the bar.

What changes for suppliers?

Suppliers trade card acceptance fees for fast settlement and guaranteed payment — a virtual card charge authorizes against real funds, with no thirty-day float and no collections risk. The remittance data attached to the payment reduces matching work on the receiving side. Resistance is real but concentrated: enterprises with pricing power refuse the rails or pass the cost back, while smaller suppliers integrate the numbers into standard card processing and take the faster cash.