Home » Blog » Virtual Cards in Singapore 2026: Security, Use Cases and Bank Options

Virtual Cards in Singapore 2026: Security, Use Cases and Bank Options

Virtual cards in Singapore are not all the same product. Some banks provide an instant digital version of a newly approved physical card, some issue a virtual-first debit card, and some non-bank payment providers let customers create separate reusable or single-use card numbers. Those differences determine how much separation the virtual credential provides, where it can be used, and what happens when the physical card arrives.

For online shopping, subscriptions and mobile-wallet payments, a virtual card can reduce reliance on a physical card and may limit exposure of its details. It does not remove merchant risk, phishing risk, foreign-currency charges, credit-card interest or the need to authenticate certain online transactions.

2026 Singapore Options
Credit and Debit
Reusable and Single-Use
Online and Mobile Wallets
Virtual card
Digital card credentials that can be used without presenting plastic.
Digital version
A virtual representation of an underlying physical debit or credit card.
Single-use card
A card number designed to change after a one-time transaction.
Mobile-wallet token
A payment credential created for a supported digital wallet and device.

The label “virtual card” does not tell you how the card is funded or how separate it is from a physical card. A virtual card may draw from a bank account, an approved credit line or a payment-account balance. Its number may be separate from the physical card, or the two versions may share card details.

What Counts as a Virtual Card in Singapore?

Separate Virtual Card

The provider generates card credentials for digital use. Depending on the provider, the virtual card may have credentials that are separate from a physical card and may be created, frozen or replaced from an app.

Reusable versions suit repeat online spending. Some providers also offer one-time credentials for individual purchases.

Instant Digital Version

The bank approves a normal debit or credit card but makes a digital version available before the plastic card arrives.

This model is useful for immediate spending, but it does not necessarily create a fully independent card number. OCBC, for example, states that its digital and physical cards share the card number and expiry date while using different CVVs.

Virtual-First Card

The digital card is created first and the physical card is secondary or optional. GXS follows this structure for its debit card: a customer with a GXS Savings Account can create a virtual debit card and request the physical version separately.

In the GXS model, the virtual and physical cards are parts of the same card relationship rather than isolated card numbers.

A card stored in Apple Pay, Google Pay or another wallet should not automatically be described as a separate virtual card. A digital wallet can create its own tokenised payment credential for an existing physical, digital or virtual card.

Virtual Card Options Available to Singapore Users

The comparison below separates traditional-bank products from non-bank card services. It also distinguishes cards created primarily for digital use from temporary digital versions of physical cards.

ProviderCategoryCard TypeCredential ModelMobile WalletSingle-UseATM From Virtual CardOfficial Verification
DBS / POSBBankSelected credit and debit cardsInstant virtual version of an approved eligible card; physical card followsApple Wallet for eligible instant cardsNo single-use feature statedNot a virtual-card cash featureDBS Instant Card
OCBCBankEligible credit and debit cardsDigital version; same card number and expiry as physical card, different CVVSupported mobile walletsNoPhysical-card functionality applies separatelyOCBC Instant Digital Card
HSBC SingaporeBankCredit cardVirtual version automatically issued to the primary cardholder after approvalSupportedNoNoHSBC Virtual Card
Standard CharteredBankEligible credit cardsTemporary digital version before physical-card activationApple Pay, Google Pay and Samsung PayNoNoSC Digital Credit Card
GXS BankBankDebit cardVirtual-first debit card; optional physical card shares the card credentialsSupported third-party digital wallets subject to bank supportNoNo; GXS states cash withdrawals are unavailable for the debit cardGXS Debit Card
RevolutNon-BankVirtual debit cardReusable virtual card plus separate single-use optionReusable virtual card can support Apple Pay and Google PayYesNoRevolut Virtual Cards
WiseNon-BankDigital debit cardSeparate digital cards linked to a Wise account balanceApple Pay and Google Wallet, with additional supported walletsNo disposable feature stated on the Singapore digital-card pageCash access relates to the physical Wise card, not the digital credential aloneWise Digital Card
YouTripNon-BankVirtual card linked to a multi-currency walletVirtual card available for digital use while physical-card access is separateApple Pay and Google PayNo disposable feature statedVirtual credential itself is not an ATM cardYouTrip Singapore

Availability can depend on application channel, approval method, customer status, device, underlying card and provider rules. A bank offering instant digital access to one card does not mean every card issued by that bank has the same feature.

How Singapore Bank Virtual Cards Differ

DBS and POSB: Instant Use for Selected Cards

DBS offers an instant virtual version for a defined list of eligible DBS and POSB credit and debit cards. After an eligible application is approved, the virtual version appears through digibank and can be added to Apple Wallet without waiting for the physical card.

The bank’s published eligibility list includes selected DBS and POSB products rather than every card in its portfolio. The physical card is still mailed to the customer, so the feature is best understood as early digital access to an approved card, not as a disposable online card number.

OCBC: Digital and Physical Cards Share Core Details

OCBC’s instant issuance model is useful for showing why “digital card” and “separate virtual card” are not interchangeable terms. OCBC states that its digital card carries the same card number and expiry date as the physical card. The CVV is different.

Eligible customers can use the digital card for online or app purchases, supported mobile-wallet payments and recurring bills. OCBC also states that website or app purchases require a merchant flow that requests the CVV. The digital card is made available to the primary cardholder.

This structure provides immediate card access, but the shared card number means it should not be described as the same type of credential isolation provided by a separately generated online-only number.

HSBC: Virtual Access Starts After Credit Card Approval

HSBC Singapore automatically issues virtual access to the primary cardholder once an eligible credit card is approved. Card number, expiry date and CVV can be accessed through the HSBC Singapore app, with card details masked by default.

Before the physical card is activated, HSBC limits use to supported secure transaction types, including qualifying 3-D Secure transactions and approved mobile-wallet transactions. Once the physical card is activated, those initial transaction-type restrictions are lifted. The virtual card, mobile card and physical credit card use the same card account and credit limit.

HSBC’s virtual card is therefore mainly an instant-access layer for an HSBC credit card, rather than a collection of independent virtual numbers for separate merchants.

Standard Chartered: A Temporary Digital Credit Card

Standard Chartered uses a different structure. Its Digital Credit Card is a virtual version of an eligible credit card that can be activated after approval and used before the physical card is activated.

The bank states that the digital version can be used for qualifying 3DS-authenticated online purchases and supported digital-wallet payments. The digital card must be activated within the permitted period, and it stops being available once the physical version of the card is activated.

This makes the Standard Chartered product a temporary bridge between approval and physical-card activation rather than a permanent second virtual card.

GXS: Virtual-First Debit Card Linked to Savings

GXS uses a virtual-first debit structure. A customer with a GXS Savings Account can create a virtual GXS Debit Card linked to that account, and the virtual card is automatically activated when created.

The card can be used for online transactions and supported contactless transactions through an application. Customers may request a physical GXS Debit Card, but GXS states that the physical version has the same card number and card security code as the virtual card.

GXS also provides app controls such as card freezing and transaction-limit management. Cash withdrawals are not available for either the virtual or physical GXS Debit Card under the bank’s published terms.

Non-Bank Virtual Card Options in Singapore

Revolut, Wise and YouTrip can serve some of the same payment use cases, but they should not be grouped with Singapore banks merely because their products include card numbers and mobile apps. Their account structures, funding methods, currency features and card terms differ from a conventional Singapore bank credit or debit card.

Revolut

Revolut provides reusable virtual cards for online purchases, recurring payments and supported mobile wallets. It also offers a single-use virtual card whose details refresh after use.

The reusable and single-use cards serve different purposes. Revolut specifically excludes subscriptions, recurring card payments, hotel or car-rental deposits and mobile-wallet use from its single-use card.

Wise

Wise states that Singapore customers can create up to three digital cards for free. The digital card is connected to the customer’s Wise balance and can be used online and with supported mobile wallets.

The more relevant comparison for overseas spending is not simply “virtual versus physical”; currency conversion charges and the currencies held in the account also affect the final cost.

YouTrip

YouTrip provides a virtual card for online and in-app spending as part of its multi-currency payment service. Its current Singapore service also supports Apple Pay and Google Pay.

The virtual card can be useful for travel-related digital spending, but its fee and currency model should be assessed separately from a Singapore bank credit card.

For a broader comparison of currency conversion structures, see Wise, Revolut and bank FX. A virtual card does not by itself remove conversion charges, exchange-rate spreads or other foreign transaction fees.

How a Virtual Card Payment Is Processed

1. Funding source

The transaction is ultimately funded by an account balance, payment-account balance or approved credit line.

2. Virtual credential

The customer uses the virtual card number directly or provisions the card into a supported mobile wallet.

3. Merchant request

The merchant submits the card transaction through its payment processor and card network.

4. Authentication

For an eligible online transaction, 3-D Secure or another issuer authentication step may be triggered.

5. Issuer decision

The bank or card provider checks the account, card status, available funds or credit and applicable controls before approving or declining the payment.

A virtual card does not create a separate pool of money unless the provider’s account structure specifically does so. A virtual HSBC credit card transaction, for example, is billed to the same credit-card account, while a GXS virtual debit transaction is funded from the linked GXS Savings Account.

Security Depends on the Type of Virtual Credential

Single-Use Number

The card number is intended for an individual online payment and changes afterward. A previously exposed number is therefore less useful for a later unauthorised attempt.

This model is poorly suited to transactions in which the merchant needs to charge the same credential again.

Separate Reusable Number

A reusable virtual card can keep a dedicated digital credential available for subscriptions or online purchases without requiring the physical card at checkout.

If the provider allows several cards, different numbers can also separate different spending purposes.

Digital Mirror of a Physical Card

The main benefit is immediate or cardless access. Credential separation can be more limited where the digital and physical versions share a card number.

This is why OCBC’s digital-card structure should not be described as equivalent to a disposable number.

Mobile-Wallet Token

A supported wallet can add another payment layer. Apple states that Apple Pay uses a device-specific account number rather than sending the actual payment-card number to a merchant during an Apple Pay transaction.

The wallet token is associated with the enrolled card but is not the same concept as generating a separate virtual card for manual online checkout.

What a Virtual Card Can and Cannot Protect

Reducing Card Credential Exposure

The strongest card-number separation occurs when a provider issues a virtual number that differs from the primary physical card number. A merchant receiving that virtual credential does not need the physical card number for the transaction.

That benefit is smaller where the virtual and physical versions share the same number. The convenience can still be useful, but the card architecture is different.

One-Time Numbers Limit Reuse

A single-use virtual card is designed for a transaction where the number does not need to remain valid for future charges. Revolut’s Singapore service regenerates single-use details after a successful payment, or after the defined validity period if the displayed card is not used.

This can reduce the value of retaining the old number, but the feature does not make a merchant, website or purchase itself risk-free.

Freeze, Limits and Transaction Alerts

Security also depends on controls outside the card number. Some providers allow customers to freeze a card, set spending limits or receive immediate transaction notifications. Those controls can be useful whether the card is physical or virtual.

The Association of Banks in Singapore also describes transaction alerts as a payment-card safeguard. Unexpected payment notifications should be reviewed promptly.

Problems a Virtual Card Does Not Remove

  • Phishing: entering banking credentials, card details or authentication information into a deceptive page can still expose an account.
  • Account access compromise: protecting the card number does not replace secure access to the banking or payment app.
  • Merchant disputes: a virtual card does not guarantee delivery, refunds or resolution of a purchase dispute.
  • Recurring obligations: freezing or replacing a card does not automatically cancel a contract or subscription.
  • Foreign-currency costs: virtual issuance does not determine the exchange rate, currency-conversion fee or card-network charge.
  • Credit costs: a virtual credit card remains credit. Interest, late charges and other terms of the underlying card still apply.

Do not approve an authentication request for a transaction you did not initiate. MoneySense advises users to monitor banking notifications and contact their bank promptly if they believe account or card information may have been compromised.

3-D Secure and Virtual Card Payments

3-D Secure, commonly shortened to 3DS, is an authentication layer for online card transactions. It operates separately from whether the card itself is physical or virtual.

Virtual card entered

The card details are submitted at an online merchant.

3DS check

If the merchant transaction uses 3DS, the issuer can request additional authentication.

Customer authentication

The bank may use an app approval flow, OTP or another supported authentication method.

Card authorisation

The payment still requires issuer approval after the authentication stage.

The Association of Banks in Singapore explains that 3DS adds authentication to card-not-present transactions. Not every online card transaction follows an identical flow, and current authentication methods can differ by issuer. Standard Chartered, for example, moved supported SC Mobile users to in-app approval for 3DS transactions, with SMS OTP retained for customers without the app.

For contactless payment context, BanksInSG also covers PayWave, Apple Pay and Google Pay.

Reusable and Single-Use Cards Serve Different Jobs

Reusable Virtual Card
  • Suitable for repeat online purchases when the provider permits them.
  • Can be suitable for recurring subscriptions.
  • May be stored by a merchant for later authorised charges.
  • Can often be frozen or replaced through an app.
  • May support Apple Pay or Google Pay.
Single-Use Virtual Card
  • Designed for a one-time online payment.
  • Card credentials change after use under the provider’s rules.
  • Not suitable for ordinary subscription billing.
  • Poor fit for deposits or merchants that need to charge the card again.
  • Revolut does not allow its single-use card to be added to Apple Pay or Google Pay.

Where Virtual Cards Are Most Useful

Online Purchases

A virtual card removes the need to retrieve or type details from a physical card. A separate virtual number can also keep the physical card number out of that merchant transaction.

Recurring Subscriptions

A reusable virtual card can be dedicated to subscription payments, making those transactions easier to identify. A single-use number should not be substituted where the merchant needs repeat billing authority.

Immediate Use After Approval

DBS, OCBC, HSBC and Standard Chartered each use some form of digital access that can reduce the waiting period between card approval and physical-card delivery, subject to their individual rules.

Mobile Wallet Spending

Eligible reusable virtual or digital cards can be provisioned to supported mobile wallets and used at compatible contactless merchants without presenting plastic.

Overseas Online Purchases

Virtual cards can work for foreign online merchants where the card network and issuer permit the transaction. Currency conversion should be checked separately from the virtual-card feature.

Separating Spending Categories

A provider that permits multiple virtual cards can make it easier to separate uses such as subscriptions and general online purchases. Wise states that Singapore customers can create up to three digital cards, while Revolut supports virtual-card creation subject to its plan and card limits.

Transactions Where a Virtual Card May Be a Poor Fit

ATM Cash Withdrawals

A digital-only credential cannot be assumed to work at an ATM. HSBC states that its virtual and mobile cards cannot be used for ATM cash withdrawals or cash advances. Revolut also excludes ATM withdrawals from its virtual cards, while GXS currently does not offer cash withdrawals on either its virtual or physical debit card.

For broader cash-access differences between Singapore cards and networks, see ATM withdrawal and deposit networks.

Hotel and Car-Rental Deposits

A merchant may need to place a pre-authorisation, collect a later charge or verify the payment card at check-in or collection. A disposable number is a poor match for that payment sequence.

PIN-Required Terminals

A digital-only virtual card may not support a terminal flow that requires the physical card and PIN. Revolut specifically lists PIN-requesting terminals among unsupported virtual-card uses.

Offline or Delayed Charges

Some merchants submit final charges later rather than completing the full payment while the customer is present. A changing or single-use card number can be unsuitable where later authorisation is expected.

Subscriptions, Deposits and Merchant-Initiated Charges

The question is not simply whether a merchant accepts Visa or Mastercard. The merchant may also need permission to charge the credential again after the first transaction.

Monthly subscription
Use a reusable card that supports recurring payments.
One-time online purchase
A reusable or supported single-use card can fit.
Hotel deposit
Avoid disposable credentials when the merchant may need a pre-authorisation or later charge.
Car rental
Check the merchant’s physical-card, deposit and cardholder-verification requirements before payment.

Revolut explicitly prevents its single-use virtual card from being used for recurring card payments, subscriptions and deposits such as hotels and car rentals. This restriction should not be assumed to apply identically to every provider, but it illustrates why reusable and disposable card numbers cannot be treated as substitutes.

Blocking a card is not a substitute for cancelling a service. If a subscription or contract should end, follow the merchant’s cancellation process rather than relying on a card freeze or replacement.

What Happens to Refunds?

A changing or cancelled virtual number does not automatically mean a refund disappears. The refund process depends on the provider, payment network and original transaction record.

Revolut states that a refund can still reach the customer’s Revolut account even when the original single-use or regular virtual card number is no longer active. That is a Revolut-specific published rule and should not be applied automatically to every virtual card provider.

For another card or bank, check the issuer’s refund procedure before replacing a card if a large merchant refund is still pending. Keep the original transaction record and merchant refund confirmation until the credit appears.

Virtual Card vs Mobile-Wallet Token

Virtual Card

Issued or generated by the bank or card provider.

May expose a card number, expiry date and CVV in the provider’s app for manual online checkout.

May be reusable, temporary or single-use.

May or may not share credentials with a physical card.

Mobile-Wallet Credential

Created when an eligible card is provisioned to a wallet such as Apple Pay.

Apple Pay uses a device-specific account number rather than providing the actual payment-card number to the merchant.

Payment normally requires device authentication according to the wallet and transaction type.

The enrolled card can itself be physical, digital or virtual.

A bank can therefore offer wallet tokenisation without offering a separate disposable virtual card. Likewise, a reusable virtual card may itself be added to a mobile wallet if the issuer supports it.

Virtual Debit Cards vs Virtual Credit Cards

“Virtual” describes the payment credential, not the source of funds. The underlying product can still be debit, credit or a card attached to a payment-account balance.

Virtual Debit Card

Spending is generally drawn from available funds in the connected account or balance. GXS is a bank example: virtual debit-card spending is funded from the linked savings account.

Wise and Revolut also offer virtual debit-card structures linked to their respective customer balances.

Virtual Credit Card

Spending is charged to an approved credit-card account and remains subject to that card’s credit limit, billing cycle, interest and fee terms.

HSBC and Standard Chartered provide examples of Singapore credit cards with virtual or digital access.

The financial difference between debit and credit still applies even when no plastic card is presented. BanksInSG’s charge and credit card comparison covers related credit-card mechanics.

Choose the Card Structure Around the Payment

One-Off Online Purchase

Look for a separate single-use option if changing credentials after the transaction is the priority.

Subscriptions

Use a reusable card that permits recurring merchant charges.

Card Needed Immediately

An instant digital version from the underlying bank may be sufficient without opening another payment account.

Bank-Linked Debit Spending

A virtual-first bank debit card such as GXS follows a different structure from a temporary digital credit card.

Travel and Multiple Currencies

Compare the virtual-card feature together with currency support, conversion pricing and overseas transaction terms.

Mobile Contactless Spending

Check whether the card can be provisioned into the wallet used on the customer’s device.

Practical Security Checks for Virtual Card Use

  1. Identify whether the card uses a separate number or simply mirrors a physical card.
  2. Use reusable credentials for recurring transactions and reserve single-use numbers for genuinely one-time payments.
  3. Keep transaction notifications enabled where the provider offers them.
  4. Review the merchant name and payment amount before approving 3DS or app authentication.
  5. Freeze a card promptly if its details appear to be compromised and contact the issuer through an official channel.
  6. Do not share banking passwords, app passcodes or authentication codes in response to unsolicited messages.
  7. Check foreign-currency fees separately instead of assuming a virtual card has cheaper overseas pricing.
  8. Keep a reusable payment method available where a merchant may need a later deposit, refund or adjustment.

Virtual Card FAQ

Can I get a virtual card from a Singapore bank?

Yes. DBS/POSB, OCBC, HSBC, Standard Chartered and GXS are examples of Singapore banking providers with published digital or virtual-card functionality. Their products are structured differently, and availability can depend on the underlying card and application method.

Does every virtual card have a different number from the physical card?

No. OCBC states that its digital and physical cards share the same card number and expiry date but use different CVVs. GXS states that its optional physical debit card carries the same card number and security code as its virtual debit card. Other providers may generate separate credentials.

Are virtual cards safer for online shopping?

A separate or single-use virtual number can reduce exposure of the primary physical-card credential. Security still depends on authentication, account protection, merchant practices and how the card is managed.

Can a virtual card be used in a physical shop?

It can be possible when the issuer allows the virtual or digital card to be added to a supported mobile wallet. Acceptance then depends on the wallet, device, merchant terminal and issuer rules.

Can I use a virtual card for subscriptions?

A reusable virtual card can support recurring payments when the provider permits them. A single-use card is generally unsuitable because the merchant needs a credential that remains valid for future authorised charges.

Can I withdraw cash with a virtual card?

Do not assume so. Several virtual-card products do not support ATM cash withdrawal. Revolut and HSBC explicitly exclude virtual-card ATM use, while GXS does not currently provide cash withdrawals on its virtual or physical debit card.

Is Apple Pay itself a virtual card?

Not in the same sense. Apple Pay can provision an eligible debit, credit or virtual card into a device and use a device-specific payment credential. The underlying card and the wallet token are separate parts of the payment setup.

Does a virtual card avoid foreign transaction fees?

No. Foreign-currency pricing follows the underlying card or provider. A virtual version of a bank credit card can carry the same foreign transaction terms as the card account it represents.

Verification Notes

Virtual-card features can change with card eligibility, application channels, mobile-wallet support and provider terms. Product-specific details on this page should be checked against the official provider pages linked in the comparison table before applying for or relying on a particular feature.

Singapore card-authentication and transaction-alert context can be checked through the Association of Banks in Singapore payment card security information.

Consumer guidance on phishing, suspicious banking notifications and immediate account protection is available from MoneySense phishing guidance.

The distinction between a card number and an Apple Pay device credential is described in Apple Pay security documentation.

Scroll to Top