How to Get a Virtual Corporate Credit Card: Eligibility and Setup
Getting a virtual corporate credit card means getting approved for a commercial card program, because virtual cards are issued under a program rather than applied for individually. The path runs in four stages. Underwriting and approval come first, then program setup and issuance, then control configuration, and finally supplier enrollment. Most of the work that determines whether the program pays for itself happens in the fourth stage.
If you need the underlying definition first, the explainer on what a virtual card is covers the mechanics of a randomly generated, control-bound card number. Everything below assumes you already know that and want the operational path.
Key Takeaways
Virtual corporate cards are issued under a commercial card program, so qualification is a program-level underwriting decision rather than a per-card application.
Approval is the easy half. Supplier acceptance determines whether the program actually moves spend, and it's the variable most rebate projections quietly assume away.
Controls are set per card at issuance, covering amount, merchant category, date window, and in most cases a lock to a single supplier.
Single-use, ghost, and lodged cards solve different problems, and choosing wrongly creates reconciliation work rather than removing it.
A rebate forecast without a supplier acceptance rate behind it is an estimate of an estimate.
Reconciliation quality depends on how the transaction posts back to your ERP, which is worth testing on your own chart of accounts before signing.
What do you need to qualify for a virtual corporate card program?
Program underwriting looks at the business rather than at any individual cardholder. The standard requirements are consistent across issuers:
A registered legal entity with an EIN
Operating history, commonly two years or more
Annual revenue above the issuer's program floor
Recent financial statements, often two years of them
A business credit profile, and sometimes a bank reference
Clarity on whether a personal guarantee applies
Underwriting depth scales with the credit line you're asking for. A modest limit against a profitable business with clean statements moves quickly; an eight-figure line against a company with concentrated customer risk gets a longer look. The full underwriting picture is covered in how to qualify for a corporate card. What follows assumes approval is already in hand.
Can you get virtual cards with an EIN and no personal guarantee?
Often, yes, and it depends on the size and financial profile of the business rather than on the card being virtual. Corporate card programs underwritten against company financials generally don't require a personal guarantee, because the issuer is extending credit to the entity on the strength of its statements and its credit profile.
Smaller businesses and early-stage companies more often encounter a guarantee requirement, since there's less financial history to underwrite against. The practical move is to ask the question during the first conversation with an issuer rather than at signing, because the answer depends on your specific numbers and no issuer publishes a universal policy.
How long does approval and issuance usually take?
Plan for three distinct stages rather than a single timeline. Underwriting review takes as long as your financial documentation takes to assemble and for the issuer's credit team to work through. Program setup follows approval, covering BIN assignment and entity structure, then user roles and the approval hierarchy. Issuing the first card is fast once the program exists.
Where projects slip is documentation. Businesses that have statements, entity documents, and an org chart of intended approvers ready move through in a fraction of the time it takes companies assembling those during the process.
How does virtual card issuing work once you're approved?
Issuance is a request-and-generate cycle rather than a physical fulfillment process. The sequence looks like this:
Program setup ties your program to the issuer's BIN range and configures your entity and account structure.
User roles and approval hierarchy get defined, covering who can request a card and who authorizes one.
A requester generates a card against a specific payable, naming the supplier, the amount, and the valid date window.
Controls attach to that card number at generation and cannot be changed by the recipient.
The number goes to the supplier, or into a payment file, depending on how you're transmitting.
The supplier charges the card, the transaction settles, and the card closes automatically.
The BIN range matters more than it sounds, since it identifies the card product to the network and shapes interchange treatment on the resulting transactions. The detail behind that sits in the explainer on what a virtual card BIN is, and the transaction flow itself is covered in how virtual card payments work in B2B.
What is the difference between a single-use card, a ghost card, and a lodged card?
Three formats, three jobs.
Format | Lifespan | Best used for | Main risk |
Single-use | One transaction | Discrete invoice payments | Reissue overhead on split shipments |
Ghost | Ongoing, per supplier or department | Recurring spend with one vendor | Reduced per-transaction control |
Lodged | Ongoing, held by a third party | Travel booked through an agency | Reconciliation depends on the agency's data |
Format determines the control model, so the choice follows the spend pattern rather than the other way around.
Single-use is the default for AP disbursement because each number dies with its invoice, which is the property that makes card fraud on the number worthless. The mechanics are covered in single-use virtual cards, and the recurring-spend alternative in what a ghost card is. Teams weighing the format question against physical plastic will find that comparison in virtual card vs. physical card.
Best practices for a virtual card program
Learn the internal strategies that make a virtual card program succeed — from program design to driving the vendor acceptance that determines how much of your AP spend earns rebates.
Download the guide
What controls can you set on each card?
Five settings do most of the work, and all of them bind at generation:
Amount cap, fixed to the invoice value
Merchant category restriction, limiting where the number can be charged
Single-supplier locking, so the number works for one vendor only
Valid date window, after which the number is dead
Approval routing, applied before the number is ever generated
Because the controls attach at generation, they're preventive rather than detective, which is what separates a virtual card program from expense-report review.
Occupational fraud runs a median $104,000 loss per case and a median 12 months before detection, according to the ACFE's Occupational Fraud 2026 report. A control that blocks the transaction outright removes the detection lag from the equation, which is the practical argument for setting limits at issuance rather than reviewing spend afterward. Getting the policy layer right is its own exercise, covered in card controls and spend policies.
Will your suppliers accept a virtual card?
Some will, some won't, and the split is the single most important number in your business case. Large suppliers with established card acceptance take virtual cards readily. Small suppliers, trade contractors, and businesses whose margins are thin relative to interchange frequently decline, and some will ask you to cover the processing cost as a condition of accepting.
That objection is legitimate and deserves a straight answer rather than a workaround. A supplier accepting card payment pays interchange on the transaction, and for a low-margin vendor on a large invoice, that's a real cost against a real margin. What card acceptance offers in return is faster settlement and no collection effort, which is worth something to a supplier managing its own receivables.
The category is growing regardless of individual objections. Juniper Research put the global virtual cards market at $5.2 trillion in 2025 with the B2B sector at 76% of it, forecasting $14.6 trillion in B2B virtual card payments by 2029. Card usage in general keeps expanding, with cards accounting for more than three quarters of noncash payments by number in 2024 and credit card payments growing faster than debit for the first time in nearly a decade, per the Federal Reserve Payments Study.
What happens with suppliers who decline card payment?
They get paid another way, without breaking your payment file. A working program routes each supplier to the rail that supplier accepts, so card-accepting vendors get a virtual card, ACH-capable vendors get an ACH credit, and the remainder get a check, all from one approved payment run.
Programs that require every supplier to accept card fail on contact with a real vendor file. The design question worth asking a provider is what happens to the suppliers who say no, and whether that group creates a second manual process.
Who does the enrollment work?
Somebody has to contact each supplier and explain the change. Then confirm they accept card, capture their remittance preferences, and follow up with the ones who never respond. That work takes dedicated capacity; without it, an attractive forecast can fail to become actual card volume.
The alternative is a managed enrollment service, where the provider's team runs the outreach campaign and the exception handling. Ask a prospective provider who makes those calls, what enrollment rate they've achieved on vendor files resembling yours, and whether the enrollment work continues after go-live as new suppliers get added. The practical playbook sits in getting suppliers enrolled to accept virtual cards, and the supplier-side view in how suppliers accept virtual card payments.
How do virtual card transactions post back to your ERP?
Through an integration that returns the settled transaction with its coding, so the payable clears without a manual journal entry. Corpay maintains 100+ ERP and accounting integrations via API, SFTP, or file-based connections, including NetSuite, Sage Intacct, Dynamics 365, Acumatica, and QuickBooks.
Testing that write-back on your own chart of accounts before signing is worth the effort. An integration that posts a lump settlement into a clearing account leaves your team doing the allocation by hand, which quietly removes most of the operational savings the program was bought for.
What does reconciliation look like at month-end?
Cleaner than a physical card program, because each single-use number maps to exactly one payable. The match is one-to-one rather than a hunt through a consolidated statement for which line belongs to which invoice.
The difference shows up in close time. Teams running physical cards spend the first days of close chasing receipts and coding statement lines; teams running single-use virtual cards find the coding already attached to each transaction. The mechanics of both are covered in corporate card reconciliation.
How do rebates work, and when are they real?
Rebates are funded by interchange, so the issuer shares back a percentage of the spend that moves across the card. On a large AP file that turns a cost center into a small revenue line, which is the financial argument that usually gets the program approved.
The forecast is only as good as its acceptance assumption. A projection that assumes most of your addressable spend moves to card overstates the return by exactly as much as actual enrollment falls short of that assumption. Acceptance rate is the number to interrogate in any proposal. The economics are worked through in virtual card rebates, and the provider-evaluation criteria in how to choose a virtual card provider.
Get virtual cards issued and suppliers enrolled with Corpay
Approval is only the start of a card program. Supplier outreach, acceptance tracking, and payment-rail fallback determine how much approved spend actually moves to virtual card. Ask who owns that work after go-live and how it will be measured against your supplier file.
Corpay's Spend Management solution set issues virtual cards against your approved payables with the controls attached at generation, and our team runs the supplier enrollment campaign rather than handing you a call list. Suppliers who decline card get paid by ACH or check out of the same run, so the program never forces a second process. More than 800,000 businesses run payments through Corpay.
Transactions post back with coding intact through 100+ ERP and accounting integrations, so the close doesn't absorb the work the program was meant to remove. See how Corpay virtual cards handle issuance and enrollment together, and where they sit inside the wider commercial card program.
Frequently Asked Questions
How do you get a virtual corporate credit card?
Apply for a commercial card program with an issuer, clear underwriting on your business financials, then configure the program and issue cards against specific payables. Virtual cards are generated inside an approved program rather than applied for one at a time.
What is a virtual business card, and how is it different from a virtual corporate card?
The terms are used loosely, and the practical difference is the underwriting basis. Virtual business cards are often underwritten with a personal guarantee against a smaller entity, while corporate card programs are underwritten against company financials and typically carry higher limits and deeper controls.
Can you get a virtual corporate card with just an EIN?
Frequently, if the business has operating history and financials that support the requested line. Whether a personal guarantee is required depends on the size and financial profile of the entity rather than on whether the card is virtual, so ask the issuer directly during the first conversation.
How do virtual cards work for paying suppliers?
You generate a card number for a specific invoice with the amount, supplier, and date window fixed at issuance, then send the number to the supplier or include it in your payment file. The supplier charges it once, the transaction settles, and the number closes.
What if a supplier refuses to accept a virtual card?
Pay them on a different rail. A working program routes each supplier to whichever method they accept, so a declining vendor receives an ACH credit or a check from the same approved payment run without creating a separate process.
Are virtual cards safer than physical corporate cards?
For AP disbursement, yes, because the controls are preventive. A single-use number locked to one supplier, one amount, and one date window is worthless to anyone who intercepts it, while a physical card number stays valid across merchants until somebody notices a problem.
Do virtual card programs earn rebates?
Yes, funded by interchange on the spend that moves across the card. The size of the rebate depends entirely on how much of your addressable spend your suppliers actually accept by card, so evaluate any projection against a stated enrollment rate.
How long do virtual card numbers stay valid?
For single-use cards, until the transaction settles or the date window closes, whichever comes first. Ghost and lodged cards stay open for as long as the underlying relationship requires, which is why they carry different control settings.
Switch to Corpay
Discover how making the move to Corpay streamlines payments and strengthens your business.
Talk to an ExpertSmarter payments. Stronger growth. Keep business moving.
Corpay powers payments for 800,000+ businesses worldwide. Let’s build what’s next for yours.