Mastercard boosts virtual card security features

Mastercard is expanding its virtual card platform, Mastercard In Control, with new security controls, an embedded payments network, and single API access. This move aims to help enterprises and financial institutions manage virtual card programs with greater security, visibility, and scale.

The new issuer controls, enhanced clearing controls, and expanded embedded payments capabilities will enable businesses to reduce risk across the full payment lifecycle. Citi is the first to launch these new capabilities, which include advanced virtual card controls and a scalable connection to Mastercard’s growing embedded partner network.

According to Marc Pettican, Global Head of Corporate Solutions at Mastercard, payments are becoming more digitized and embedded into business workflows, and expectations for performance, security, and control are higher than ever. Marc Pettican added that Mastercard is expanding its virtual card capabilities to deliver more unified and scalable experiences.

Mastercard is building on its existing security features with two distinct solutions: Issuer Enforced Controls and Clearing Controls. These solutions improve control across the virtual card lifecycle, allowing issuers to set baseline guardrails and extend control validation beyond authorization into the clearing stage.

Issuer Enforced Controls applies at the point of virtual card number creation, enabling issuers to set spend limits, transaction limit caps, and validity periods. Clearing Controls, introduced last year, now has new enhancements that enable corporates and platforms to block invalid transactions and apply more precise controls.

These capabilities are underpinned by Mastercard’s network-level security, tokenization, and fraud monitoring, complemented by enterprise-grade cybersecurity solutions. Citi is already live with both Issuer Enforced and Clearing Controls and is expected to be the first issuer to roll out these VCN capabilities globally later this year.

Related: UK tightens rules on buy-now-pay-later services

The Commercial Connect API is simplifying how customers control and scale virtual card capabilities. New enhancements to the platform include expanded card controls and simplified integration.

These capabilities offer businesses a more consistent way to integrate, control, and scale their virtual card programs, helping them reduce operational complexity, accelerate time to value, and innovate faster within a single, unified experience.

Mastercard’s virtual card ecosystem now includes issuers, direct platforms, and corporates transacting across 43 countries and 174 currencies.

As virtual card adoption accelerates, Mastercard’s clients need smarter, stronger tools to manage risk. Mastercard’s deep collaboration with Citi makes it the first issuer to deliver these advanced security capabilities to the market on a global scale. This is a direct reflection of Mastercard’s commitment to helping clients streamline payments and operate more securely and efficiently around the world.

With Mastercard In Control, e-commerce flows are supported in real-time on a platform designed to be always available, fast, and resilient. The platform offers smooth, secure, and dependable payment experiences that customers can trust — at e-commerce scale. To learn more about Mastercard’s virtual card capabilities, connect with the team here. Businesses can also explore tokenized deposits for more secure transactions.