Read summarized version with:
ChatGPT Claude Grok Perplexity Gemini
Both prepaid business cards and virtual cards draw from a wallet you load, not from a credit line. A prepaid card is physical plastic shipped by mail, with one shared balance and no per-card merchant locks. A virtual card is a 16-digit Visa number emailed to a recipient, with its own spending cap, merchant category lock (where supported), and an on/off switch the owner controls from a dashboard. A prepaid card stops spending when the balance hits zero. A virtual card can stop spending before a purchase even reaches the wrong merchant, and that distinction is where most small business card losses happen.

What a prepaid business card actually is

A reloadable prepaid business card is a payment card linked to a balance you deposit in advance. You load money onto the card, hand it to an employee, and they spend until the balance runs out. No purchase is possible once the balance reaches zero, which is why many business owners describe prepaid cards as the "safe" option.

That is true in one respect: prepaid cards do not extend a credit line. You cannot owe more than you loaded. But the safety people assume prepaid provides at the control level, specifically the ability to prevent unauthorized categories of spending, is often not built into the card itself.

Most traditional reloadable prepaid cards work like this in practice:

  • You order the physical card from a provider. Delivery timelines vary by provider; physical cards are typically mailed and may take several business days to arrive.
  • You load a dollar amount onto the card. The employee can spend that balance at any merchant that accepts Visa or Mastercard.
  • There is one shared balance. If you issue five cards from the same prepaid account, they all draw from the same pool unless you use a provider with individual sub-accounts, which most entry-level prepaid products do not offer.
  • Fees accumulate. Monthly maintenance fees, ATM withdrawal fees, reload fees, and inactivity fees are common. The CFPB prepaid rule, effective April 1, 2019, requires a standardized short-form fee disclosure before purchase, but it does not cap what providers may charge. See the CFPB Section 1005.18 requirements for the full regulatory text.

One more thing worth noting: the CFPB's prepaid card rights guide notes that Regulation E error-resolution protections apply only to registered prepaid accounts. An unregistered card may carry no liability protection if it is lost or stolen.

What a virtual card actually is

A virtual card is a 16-digit card number, an expiration date, and a CVV that exists only in digital form. It carries the same Visa network rails as a physical card, but there is no plastic to produce, ship, or collect. For a full breakdown of use cases, see the complete guide to virtual cards for small business.

Virtual Card Maker, powered by Zil Money, is a self-serve platform that lets businesses issue virtual and expense Visa cards from a company wallet. You load your company wallet balance, and cards spend from that wallet. No credit check is required. Cards are issued one at a time or in bulk via Excel upload or API, each with its own controls.

When you issue a card through Virtual Card Maker:

  • The card number is emailed to the recipient. The recipient can add it to Apple Pay or Google Pay where available.
  • You set a spending cap on each card. The cap is deterministic: the card declines once it is reached.
  • You can apply merchant category locks (where supported by the payment network and merchant), time-based restrictions (where supported), and location locks (where supported). These controls are probabilistic, not deterministic, because a small number of merchants do not transmit category codes correctly.
  • You can cancel any card from your dashboard at any time. Cancellation stops future charges. Pending charges that were already authorized before cancellation may still settle.
  • Employees can attach a receipt photo to each transaction for documentation.

Visa's zero-liability policy covers unauthorized transactions on eligible Visa card accounts. For business and commercial Visa card products, zero-liability coverage is subject to issuer terms and is not a universal network guarantee for all business accounts. See Visa's zero-liability policy and confirm coverage with your issuer.

Prepaid business cards vs virtual cards: the control gap explained

This table covers every control point that matters for employee spending, and what happens when a card cannot enforce it.

Control point Traditional prepaid card Virtual card (Virtual Card Maker) Practical consequence if absent
Spend cap per card Tied to the total loaded balance; not per-card Set per card. Deterministic: declines when reached. One employee can exhaust the shared balance before others spend
Merchant category lock Not natively available on most reloadable prepaid products Available where supported by network and merchant An employee can spend at any merchant until the balance runs out
Per-card on/off switch No. Canceling the card closes the account or depletes the balance. Yes. Deactivate any single card from your dashboard. When an employee leaves, you cannot remotely stop their card
Issuance method Physical plastic mailed; delivery timelines vary by provider Card number emailed to recipient Projects that start this week cannot wait for a card to arrive in the mail
Number of cards per employee One card per person (shared balance) Issue multiple cards per person or project, each with its own cap One card covers all expense types with no separation
Receipt capture Not natively built in to most prepaid products Employees can attach a receipt photo to each charge in the platform Receipts must be collected manually, often resulting in gaps
Real-time transaction alerts Varies by provider; not standard on entry-level prepaid Available in dashboard (notification timing depends on network and transaction type) Owner finds out about purchases at statement time, not at the register
Physical card to lose Yes. Physical card must be collected when employee leaves. No physical card. Dashboard deactivation stops future charges; pending charges already authorized before deactivation may still settle. Lost or uncollected physical cards remain active until reported
Regulation E protection Applies only to registered prepaid accounts. Unregistered cards may have no liability protection. Visa zero-liability coverage may apply; for business and commercial accounts this is subject to issuer terms. Confirm with your issuer. Unregistered prepaid cards may leave the business unprotected on disputed charges
Bulk issuance Requires ordering and mailing multiple physical cards Upload an Excel file or use the API to issue cards in bulk Staffing agencies and field service companies cannot issue cards at speed

When virtual cards are the better choice

Prepaid plastic starts breaking down the moment more than two employees share spending. Here is where virtual cards are the clear answer.

Your situation Best fit Why
Employee needs to pay a single vendor repeatedly (fuel supplier, office supply store) Virtual card Lock the card to that vendor's merchant category code (where supported). Charges outside that category are declined where the merchant transmits category codes correctly.
Employee travels in person and needs to swipe at hotels, gas stations, and restaurants without a mobile wallet Physical card (prepaid or debit) In-person swipe still requires physical plastic in locations where mobile wallet is not accepted.
You need to give a card to a contractor today for a project starting this week Virtual card Card number delivered by email. No mail wait.
You have 10 field employees and want a different spend cap on each Virtual card Issue 10 separate virtual cards, set individual caps. One dashboard.
Your business has no internet-connected device on the job site Physical prepaid card Employee needs a card to tap or swipe offline.
You want to cancel a card the moment an employee leaves Virtual card Deactivate from the dashboard. Stops future charges; pending charges already authorized before deactivation may still settle. No card to physically recover.
Your accountant needs purchase-category data for IRS expense substantiation Virtual card Merchant category code lock provides category evidence at point of purchase, not after the fact. This is general information, not tax advice. Confirm with your CPA.
You need to issue 50 cards to a new field crew this quarter Virtual card Bulk issuance via Excel upload or API. No physical production or mailing required.
The three cases where physical plastic still wins: in-person-only vendors with no mobile wallet support, ATM cash needs, and job sites with no internet access. Outside those three situations, virtual cards are the better tool.

Worked example: a property management firm

Marcus Webb runs Clearwater Realty Group, a 12-person property management firm in Phoenix. He has three field coordinators who buy supplies, pay cleaning vendors, and occasionally need to cover locksmith calls.

He loaded three reloadable prepaid Visa cards with $400 each at the start of the month. By the 15th, the situation had unraveled in three separate directions:

  • One coordinator had spent $280 at a restaurant supply store on personal event catering, not a work purchase.
  • A second card balance was at $12 because a vendor had charged a $389 locksmith invoice Marcus had not approved in advance.
  • The third card was with a coordinator who had given notice and not returned the card.

Marcus spent four hours that afternoon recovering the physical card, filing a dispute on the restaurant charge (denied, because the purchase was not technically unauthorized, just unwanted), and reloading the depleted card. The restaurant purchase was not blocked at the register because the card had no category restriction. It was discovered after the fact.

The following month he switched to virtual cards. Each coordinator received their 16-digit card number by email. Marcus set a $400 cap on each card, and applied category locks to hardware stores (MCC 5251), cleaning services (MCC 7349), and repair services (MCC 7699, which covers locksmith and related trade calls) where supported. All other categories were blocked where the payment network and merchant transmitted category codes correctly.

The restaurant charge would likely have been declined at the register, provided the merchant's category code was transmitted correctly. The locksmith invoice went through because it matched an approved category. The departing coordinator's card was deactivated from the dashboard, stopping future charges.

4 hours
chasing a paper trail
20 min
reviewing a clean log

Times are illustrative; actual time savings will vary by team size and setup.

Three mistakes businesses make when switching from prepaid to virtual cards

Mistake 1: Issuing one virtual card per department instead of one per person. When four employees share a card number, the transaction log shows the card, not the individual. That makes IRS expense substantiation and fraud investigation nearly impossible: you know what was bought, but not who bought it. Issue one card per person. See how to give employees virtual cards with individual spend controls for a step-by-step setup.
Mistake 2: Loading one shared card for a team instead of one card per person. When multiple employees share a single card number, there is no per-person transaction trail. That makes IRS accountable-plan substantiation nearly impossible and creates joint liability for charges where any authorized user made the purchase. IRS accountable plan rules define a 60-day fixed-date safe harbor (Rev. Proc. 2011-47) for adequate accounting to the employer. A single shared card with no per-person data makes that requirement very difficult to meet. See IRS Publication 463 for the full framework. This is general information, not tax advice. Confirm the specifics with your CPA.
Mistake 3: Treating "no credit line" as the only safety criterion. The real financial exposure for most small businesses is not running up a credit card balance. It is funding non-business purchases, paying the wrong vendor, and failing to produce categorized receipts at tax time. Prepaid cards solve the credit-line risk while leaving the category-control and documentation risks fully open. A virtual card with a category lock addresses the risks that actually cause audit problems.

Frequently asked questions

What is the difference between a prepaid business card and a virtual card?

A prepaid card is physical plastic with one shared balance and no per-card merchant locks. A virtual card is a 16-digit number emailed to a recipient, with its own spend cap, merchant category lock (where supported), and an on/off switch you control from a dashboard. Neither creates a credit line.

Can you get a prepaid business card with spending limits per employee?

Traditional reloadable prepaid cards share one balance and do not offer per-card merchant category locks natively. If you need a separate spend cap per employee with category restrictions, a virtual card is the better fit because each card carries its own controls set before the purchase happens.

Are virtual cards safer than prepaid cards for employee spending?

Virtual cards give you controls a prepaid card does not have: a per-card spend cap, a category lock (where supported by the merchant and network), and a dashboard on/off switch. A prepaid card stops spending only when the balance runs out.

Do virtual cards require a credit check?

No. Virtual Card Maker, powered by Zil Money, issues virtual Visa cards from a company wallet you load. There is no credit check and no personal guarantee required. The wallet is funded by you before cards are used.

Can I cancel a virtual card if an employee leaves?

Yes. You can deactivate any individual card from your dashboard. Deactivation stops future charges. Pending charges that were already authorized before deactivation may still settle.

Can I use a virtual card at gas stations and hotels when employees travel?

Virtual cards work at card-present terminals through Apple Pay or Google Pay where those wallets are accepted. For in-person swipe-only locations where mobile wallet support is not available, such as some gas station pumps or hotel kiosks, a physical card is still the better tool. Check whether the specific location accepts mobile wallets before relying on a virtual card alone.