I love one time CCN’s that can only be used once. No chance of getting the useless number stolen or hacked.
B/A had the very best with ShopSafe. A really clever and very safe online purchasing method. Then it was dropped. [B/A claimed their CC security was so good, ShopSafe was unnecessary]
Tried Discover Bank one time CCN but that one number can be used over and over by the original seller. Discover called that a “feature”.
Citi.com has Virtual Card Numbers. Each one can be set for max value, $50, $100, whatever, along with the expiration date.
One can generate a VCN now, July/2022, buy something online and set the expiration date Aug/2022. This is ideal for stopping those annoying “auto-renewal” products.
You can log in online and change those values.
Take a few seconds to generate a new one time VCN.
I use virtual card numbers with capital one. I rely on them to be used indefinitely (or you can set a time limit) with only 1 merchant for each of them. All of my “mission critical” utilities and other vital services have their own VCN. I never use the physical card for anything. I have never exposed that number in the wild.
It’s impossible for fraud to bring down more than one of my vital services. Only if the fraud is an inside job at capital one!
If I get hit with fraud I just generate a new VCN and keep going. No fraud in 12 years though on this account.
That is also how I do it. One VCN per merchant.
I’ve all but stopped since Citi makes it such a pain to generate them. I’m not sure if it still takes 10 clicks, entering your username and password twice, and waiting for a confirmation call or text, but that process drove me to cut back on it. At one point, I’d log in and generate a handful at time, taking screen shots I could use later. I’d do that about once per month. Now I just use them occasionally, for particularly sketchy vendors (I’m looking at you, Colorado toll roads).
“I’ve all but stopped since Citi makes it such a pain to generate them.”
I don’t understand that. Last night I created a new VCC on Citi, and once logged into my account, took 5-10 seconds to get a VCN.
One oddity. There is a copy button on the new VCC and it works, but when pasting into Excel, it creates some mathematical result. Changing that to a number format and the last digit is changed. I’ve learned to paste into notebook, then copy that to paste into Excel.
I would not keep any confidential or financial info in plain text (unencrypted) anywhere on my computer or distributed storage. Excel would count as plain text in my book
My Excel files are all encrypted with VeraCrypt.
It looks like they’ve simplified it, so I now only have to log in once. I just timed it at 8 minutes, but about two of those minutes were spent writing down the steps. So let’s say it only takes me six minutes to do all this:
- Open citi.com
- Open keepass, type in password.
- Use auto-login to log into to citi.com
- Wait 2 minutes, tell browser (which thinks web site crashed) to keep waiting twice.
- Click “no thanks,” I don’t want a balance transfer offer.
- Click X to skip the tutorial on how to use Citi’s web site.
- Click on a card that can use virtual account numbers.
- Locate link to generate virtual account number (it’s halfway down in smallish print).
- Click Generate New Number.
- Select which card I want to use (again).
- Set time limit and dollar amount.
- Citi verifies my identity with a phone call, because for some reason, they can’t send text messages to Google Voice (which is the number I use for everything). I have to wait through bilingual instructions before getting the code, then press #.
- Type number into web site.
- My virtual card pops up.
If I’m on a bill pay site in another tab, such as for a doctor’s office, I’ve probably been logged out of that site by this time, and so have to start that one over. Then when I want to pay another bill, I’ve been logged out of Citi. That’s why I used to just take screen shots of a few VANs all at once for later use.
And of course you can’t do it with their app, which is otherwise pretty good. There’s a link for Virtual Account Numbers, but it just opens a browser window on my phone, where I get to do all of the above steps with a tiny touch keyboard, on the device receiving the call. I did it once when I really needed one (again, looking at you Colorado), but I hope to never do it again.
That’s why I create about ten VCC’s at a time, and name them ready1, ready2, etc., then later rename them to the merchant name.