How to control what your employees can buy online.

Read summarized version with:

ChatGPT Claude Grok Perplexity Gemini

Virtual cards let you hand an employee purchasing power without opening your main business account to them. The controls are set before the first swipe, not after a problem shows up. With VirtualCardMaker.com, you load a dollar amount, lock the card to approved merchants or spending categories where supported, and email it to the employee. They get what they need for the job. Every other purchase gets declined automatically.

Most small businesses give employees a card the same way they always have: share the number and hope the person stays in bounds. That works until someone buys from the wrong vendor, charges a personal item, or the receipt goes missing. By the time you notice, the money is gone and the conversation is uncomfortable.

Spend control is not about distrust. It is about building a system that does not rely on willpower. A merchant lock, a category cap, and a spend ceiling mean the employee can buy what the job needs and nothing else, not because you are watching every transaction, but because the card itself will not allow anything outside its scope.

Here is how each control layer works and how to combine them for a tight, auditable setup.

Why does giving employees a card without controls cause problems?

Without spending controls, the only thing standing between your budget and an off-script purchase is the employee's judgment. A card with no controls works everywhere, at any merchant, in any category, up to whatever limit you set. That is a bet most business owners have lost at least once.

The most common outcome is not malicious spending. It is scope creep. An employee issued a card for office supplies uses it at lunch when they forget their wallet. Someone buying tools for a job site adds a personal item because the card is already in their pocket. These are not acts of bad faith. They are what happens when there are no guardrails on the card itself.

The second problem is auditability. When one card covers multiple categories or gets passed between employees, reconciling receipts becomes its own job. One card per employee, per purpose, solves both problems at once. The structure replaces the conversation.

What types of controls can you put on a virtual card?

VirtualCardMaker.com gives you three distinct control layers, and each one does a different job.

The spend cap is deterministic. You load a dollar amount onto the card and that is the hard ceiling. No overdraft is possible. The card declines the moment the balance is exhausted. This is the floor-level control that every employee card should have, regardless of what else you configure.

Merchant locks, where supported, pin the card to one specific vendor. If an employee's task is to order from one approved supplier, a merchant lock means the card will not authorize anywhere else. The charge fails before it posts.

Category locks, where supported, restrict spending to a type of store rather than a single merchant name. Using merchant category codes (MCC codes) that Visa assigns to every type of business, the card network checks whether the merchant falls inside the approved category at the moment of authorization. If it does not, the card declines.

These three layers work together. The spend cap is the safety net that catches anything the locks miss. Merchant and category locks narrow the field. The spend cap holds the line on everything else.

How do merchant locks work, and when should you use one?

A merchant lock, where supported, ties the card to a specific merchant using that vendor's identifier in the payment network. When the employee presents the card anywhere else, the authorization fails before a charge posts to your account.

Use a merchant lock when:

• You have a single approved vendor for a specific type of purchase and you want the card to work nowhere else
• The employee's task is clearly scoped to one supplier, such as a specific distributor or approved platform
• You want a hard stop at the vendor level, not just a broad category restriction

Here is the catch. Merchant locks are probabilistic. They depend on the merchant passing the correct identifier at authorization. Some larger merchants use a parent company identifier that spans several brands or store formats. If a transaction routes through a different identifier, the lock may not catch it. This is uncommon, but it is worth understanding before you rely on it as your only control. The spend cap is always active as a backstop regardless.

Canceling the card stops new authorizations. Charges already authorized before cancellation may still settle to your account. If a charge is in pending status and you want to dispute it, contact your card issuer directly.

How do category locks limit what employees can buy?

Category locks, where supported, use the MCC code that Visa assigns to classify every type of business. When you restrict a card to a category, the network checks the merchant's MCC at authorization. If the MCC falls outside the approved range, the card does not authorize.

A few practical examples of how this plays out:

• Office supply stores (MCC 5111) for an admin purchasing paper, toner, and desk items
• Service stations (MCC 5541, 5542) for a field employee filling a company vehicle
• Prepackaged software (MCC 7372) for a developer buying SaaS tools
• Building materials (MCC 5251) for a crew purchasing job-site supplies

Like merchant locks, category locks are probabilistic. Large general merchandise retailers often carry a broad MCC that covers multiple departments. If an employee tries to buy printer paper at a general big-box store, the transaction may still process depending on that store's MCC classification. For tighter control over a single type of purchase, a merchant lock on an approved specialty supplier is the stronger option.

Why does this matter? Because no single control is perfect in isolation. The right setup layers a category lock for broad guidance, a merchant lock where you need it tighter, and a spend cap as the always-enforced ceiling beneath everything else.

How do you set a spend limit that actually holds?

The spend cap is the one control that is always enforced, no matter what else happens. You fund the card with exactly what you want the employee to spend. When that amount is gone, the card declines. There is no overdraft mechanism.

Match the cap to the task, not to a round number. If an employee is buying $65 worth of cleaning supplies, load $70. A $200 cap on a $65 task creates $135 of unstructured room. That room is exactly where off-script purchases happen.

Use separate cards for separate purposes. A card loaded for a conference registration should not double as a hotel booking card. Two tasks, two cards, two spend caps, two clean receipt trails. If your team needs a formal approval step before cards are issued, the article on how to set up a spend approval workflow with virtual cards covers how to wire that process together.

Reload intentionally. Because every VirtualCardMaker.com card is wallet-funded, you control every reload manually. The employee cannot spend past what is currently loaded. This is meaningfully different from a credit-funded card, where a limit can sometimes be exceeded or carry fees when approached.

How do you set up a controlled employee card from start to finish?

The sequence from card creation to first use looks like this.

1. Create the card at VirtualCardMaker.com. No credit check and no personal bank link are required.
2. Set the spend cap. Load the exact dollar amount for the task. Do not pad the amount unless the scope genuinely requires flexibility.
3. Apply a merchant lock or category lock, where supported, based on what the employee is purchasing and how specific you need the restriction to be.
4. Email the card to the employee. The card number, expiry date, and CVV are delivered to their inbox.
5. The employee adds the card to Apple Wallet or Google Wallet themselves and uses it wherever Visa is accepted online.
6. Review transactions in your dashboard. When the task is complete, cancel the card if it is no longer needed for future purchases.

If you are bringing a new team member onboard and need to issue their first card from day one, see how to give a new employee a company card on day one for the full onboarding flow, including what to communicate and when.

If your business currently uses petty cash for this kind of field or office purchasing, the article on how to replace petty cash with virtual cards walks through how to make the switch and what to communicate to your team.

Frequently asked questions

This article is for general informational purposes only and does not constitute legal or financial advice. Consult a qualified advisor for guidance specific to your situation.