# Virtual Card for International Purchases: How It Works

> How a virtual card works for international purchases, why it is safer, what it costs in IOF and the cases where it doesn't work. A 2026 guide.

Source: https://usepicnic.com/en/blog/virtual-card-for-international-purchases · Published 2026-07-31 · Updated 2026-11-10

Buying from a foreign website is the moment you hand your card details to the largest number of intermediaries at once: the store, its payment gateway, its anti-fraud provider, sometimes a marketplace in the middle. If any one of them leaks, the number that leaked is the same one printed on your plastic card. A virtual card solves exactly that problem, and it solves it well.

What it doesn't solve, and this is where almost every piece of content on the subject misleads the reader, is the cost. A virtual card doesn't reduce IOF (Brazil's tax on financial operations), doesn't remove the spread and doesn't change the exchange rate by a single cent. What a purchase costs is decided by the account behind the card.

This guide explains how a virtual card works for international purchases, why it is safer than a physical card, what a dollar purchase really costs in 2026, and the specific cases where it doesn't work. The data was verified against official sources in November 2026.

## Virtual cards for international purchases at a glance

| Question                               | Short answer                                                                              |
| -------------------------------------- | ----------------------------------------------------------------------------------------- |
| Does it work on foreign websites?      | Yes. To the store, it is a regular card with a number, expiry date and CVV                |
| Is it safer than a physical card?      | Yes, for online purchases. Your plastic card's number is never exposed                    |
| Does it change the IOF or the spread?  | No. The cost is set by the account behind the card                                        |
| Can I use it in physical stores?       | Yes, with issuers that let you add it to your phone's digital wallet                      |
| Does it work for subscriptions?        | Yes, as long as it is a permanent card, not a single-use one                              |
| Is there any case where it won't work? | Yes. Hotel and car rental pre-authorizations that require the plastic, and counter pickup |

One warning applies to the whole table: "virtual card" is not a standardized product. What each row delivers depends on the issuer, and the difference between the two models on the market is the subject of one of the sections below.

## What a virtual card is, in plain terms

A virtual card is a real card that never takes physical form. It has a number, an expiry date, a CVV and a card network, runs on the same rails (Visa, Mastercard) and is accepted wherever card-not-present payments are accepted. The difference is that it is born and dies inside an app.

For a store abroad, there is no distinction. It receives 16 digits, a date and a security code, authorizes through the network and that's it. Nobody on the other side knows, or needs to know, whether that number came from a plastic card in your wallet or from a screen on your phone.

The point that matters is the link: the virtual card is tied to the same account or credit limit as your main card, but with **its own credentials**. That is what changes everything for security. If the virtual card's number leaks, what leaked is a disposable number, not your main credential.

## Disposable or permanent: two different products

This is the detail that causes the most confusion, because both models are called "virtual card" and they behave in opposite ways.

**Disposable (single-use) virtual card.** Some Brazilian banks generate a new number for each purchase, with a short validity, and invalidate it right after. It is the most restrictive model: great for a one-off purchase on an unfamiliar website, bad for anything recurring. If you use a single-use card for a subscription, the first charge goes through and the second is declined.

**Permanent (renamable) virtual card.** The number stays valid indefinitely, you give it a name and you can keep several in parallel. This is the model that works for subscriptions, for separating spending and for adding to your phone's digital wallet. You keep it as long as you want, freeze it when you are not using it and delete it when you want to cut it off.

In practice, anyone who buys from international websites with some frequency wants the second model, and wants **several**: one card just for dollar subscriptions, one just for marketplaces, one just for that big one-off purchase. Each with its own name, each cancelable without affecting the others.

## Why a virtual card is safer for international purchases

Online shopping is where your card is most exposed, because the data has to travel in full to the merchant. Industry figures show Brazil has been tightening the net: the card-not-present fraud rate fell 36.5% in three years, from 54.4 to 34.5 basis points between the third quarter of 2022 and the same period of 2025, according to [Panorama ABECS](https://panoramaabecs.com.br/indice-fraudes-cartoes-cai-abecs-brasil/) (the Brazilian card industry association). Across the card market as a whole, there were 35 frauds per 100,000 card transactions in that quarter, compared with 52 three years earlier.

The decline is good news and comes from investment in authentication and tokenization. But the number isn't zero, and the average online fraud ticket in the third quarter of 2025 was R$258.74. With international purchases, you also add distance: sorting out a problem with a store in another time zone, in another language, with a different chargeback timeline, is much harder than sorting it out with a Brazilian store.

A virtual card attacks this risk on four fronts. The first two apply to any virtual card; the last two depend on the issuer offering the permanent model, with freezing and several cards in parallel.

**1. Your main credential is never exposed.** The website receives the virtual card's number. If that store's database leaks six months later, your physical card's number wasn't in it.

**2. The damage stays contained.** A compromised card is one card. You delete it, create another in seconds and carry on with everything else working. With a cloned physical card, you lose the whole card, and every purchase that depended on it stops at once.

**3. You can freeze it instantly.** Finished the big purchase? Freeze the card. No new charge goes through while it is frozen, and you unfreeze it with a tap when you need it again. It is the difference between a card that is always open and a card that is only open when you want it to be.

**4. Each subscription gets its own off switch.** That service you signed up for once and never managed to cancel properly? With a dedicated virtual card, canceling means deleting the card. The next charge simply has nowhere to go.

An honest caveat: no payment method is 100% fraud-proof. A virtual card eliminates the exposure of your main number, but it doesn't protect you from typing your details into a fake website after clicking a phishing link. It greatly reduces the damage; it doesn't replace checking the site's address before you pay.

## What a virtual card doesn't solve: IOF and spread stay the same

Here is the most expensive myth on the subject. A virtual card **is not a payment method with its own exchange rate**. It is a different credential for the same account. The cost of an international purchase is still set by whoever issues the account underneath.

If the virtual card is linked to your Brazilian credit card, the international purchase pays the [3.5% IOF](https://usepicnic.com/br/blog/o-que-e-iof) plus the bank's spread, exactly as it would on the plastic card. The 3.5% rate is set by [Decree No. 12,499/2025](https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/decreto/d12499.htm), of June 11, 2025, which also revoked the old schedule that would have gradually cut the rate to zero by 2028. Be careful: a lot of content about virtual cards still quotes 5.38% or 6.38%, rates that no longer apply.

If the virtual card is linked to an international dollar account, it pays that account's fees. The details of the billing flow, from the exchange rate to the statement, are in [how an international card works](https://usepicnic.com/br/blog/como-funciona-cartao-internacional).

The practical math, for a US$300 purchase on an American website, with the dollar at R$5.40:

| Component                                                   | Brazilian credit card  | Picnic (digital dollar balance) |
| ----------------------------------------------------------- | ---------------------- | ------------------------------- |
| Purchase amount                                             | R$1,620                | R$1,620                         |
| Converting reais to dollars (provider's cost, 0.3% to 0.5%) | Not applicable         | R$5 to R$8                      |
| IOF (3.5%)                                                  | R$56.70                | R$0                             |
| Issuer spread (typically 4% to 6%, varies by bank)          | R$65 to R$97           | R$0                             |
| **Total**                                                   | **R$1,742 to R$1,774** | **R$1,625 to R$1,628**          |

Note an important point about the right-hand column: it applies to Picnic, not to any dollar account. Other international dollar accounts charge 3.5% IOF on the standard loading path and add their own spread, from 0.4% to 2%. Picnic itself charges no margin when you load from reais, but the rate includes the provider's cost, currently between 0.3% and 0.5%, shown in the app before you confirm (see the [Picnic fee table](https://usepicnic.com/br/help/articles/tabela-completa-de-taxas-picnic), in Portuguese). Before choosing, check the issuer's fee table.

The difference of roughly R$114 to R$149 on a single US$300 purchase has nothing to do with the card being virtual or physical. It has to do with the account underneath. If you shop on international websites often, that is the number that decides, not the card's format. The same reasoning applies to [international subscriptions](https://usepicnic.com/en/blog/how-to-avoid-iof-on-international-subscriptions), where the charge repeats every month and the compounded cost weighs more than it seems.

## The cases where a virtual card doesn't work

There are real situations where a virtual card gets stuck, and all of them involve someone wanting to see the plastic:

**Pre-authorization with the physical card present.** Hotels and car rental companies abroad often ask, at the counter, for the same card used for the booking, to place a security deposit. If the booking was made with a virtual card that doesn't physically exist, you may be required to redo the guarantee with another card on the spot. For hotel and car bookings, use the physical card or confirm with the business beforehand.

**Counter pickup.** Online purchases picked up in store, tickets collected at the box office and some types of travel tickets may require you to present the card used for payment. Same problem.

**Subscriptions after deleting the card.** Deleting is final. If that virtual card was registered with services you still use, all of them stop at the next charge and you have to update each one. When you only want a pause, **freeze instead of delete**.

**Chargebacks and returns.** A refund goes back along the same path as the purchase. If there is still a chance of an exchange or return, keep the card alive, even if frozen, until the deadline passes. Deleting it earlier tends to lengthen the money's way back.

## How to use it well: four habits that make a difference

These habits apply to issuers that offer the permanent virtual card. If you only have a single-use disposable card, only the first one applies.

**One card per purpose.** One for dollar subscriptions, one for marketplaces such as [Amazon US](https://usepicnic.com/en/blog/how-to-buy-on-amazon-us-from-brazil), [AliExpress and Shein](https://usepicnic.com/br/blog/melhor-cartao-aliexpress-shein), and one for one-off purchases on websites you don't know. When something goes wrong, you kill only that one.

**Name each card.** It seems like a detail, but it is what makes your statement readable. "Subscriptions", "US purchases", "New site test". Six months later, you know exactly where each charge came from.

**Freeze what you're not using.** While a card is frozen, no new charge is authorized, neither by mistake nor by fraud, and it works again with a tap. Purchases already authorized before the freeze can still settle normally.

**Add it to your digital wallet.** A virtual card inside Apple Pay or Google Pay can also pay contactless in physical stores, with the extra protection of tokenization. It is the best of both worlds: safe online and convenient at the counter. The full picture is in [Apple Pay and Google Pay abroad](https://usepicnic.com/br/blog/apple-google-pay-no-exterior).

## Where Picnic fits in

Picnic is a technology platform that has operated globally since 2021 and offers an international account with a Visa card linked to a digital dollar balance, with no annual fee, accepted in more than 180 countries where Visa operates.

> **Card availability:** [new Picnic card orders have been temporarily paused since September 22, 2026](https://usepicnic.com/br/help/articles/novos-pedidos-cartao-picnic-temporariamente-pausados) (notice in Portuguese), while Picnic's card-issuing partner, Gnosis Pay, moves to a new version of its infrastructure. There is no confirmed date for orders to reopen. If you already have the card, it keeps working normally until December 20, 2026, 23:59 UTC; after that, card use continues on the new infrastructure through an in-app upgrade, which starts with the virtual card, and you will need to add the new card to Apple Pay or Google Pay again. If you don't have the card yet, check current availability before planning around it.

Picnic's virtual cards follow the permanent, renamable model. If you already have the card, you create them directly in the app, give each one a name, and freeze, edit and delete them whenever you want. On the current card version, the account allows up to 5 active cards at the same time, counting the physical card and the virtual ones, so someone who has the plastic can keep four virtual cards in parallel, and deleting one frees up the slot to create another right away. The upgrade to the new infrastructure may change how many virtual cards you can keep at once, so check the current limit in the app.

They have no PIN for card machines, because there is no plastic to insert, and each purchase is still authorized by the store and the network. They work for online purchases and can be added to Apple Pay and Google Pay to pay contactless in physical stores. Since each account is entitled to one active physical card, the virtual card is also the natural fallback while the plastic is on its way or after it gets lost.

And the part other virtual cards don't deliver is the cost underneath: spending in dollars with the Picnic card has 0% exchange cost, with no IOF and no spread charged by the platform. On purchases in other currencies, only the Visa network's conversion of about 0.3% applies. Loading the balance from reais is not free: Picnic charges no margin, but the rate includes the provider's cost, currently 0.3% to 0.5%. On a US$300 purchase, that is the difference between paying about R$1,625 to R$1,628 and paying R$1,742 to R$1,774. How this plays out on a trip is covered in [the best card to use in the US](https://usepicnic.com/en/blog/best-card-to-use-in-the-us).

A transparency note on this point: BCB (Central Bank of Brazil) Resolution No. 521/2025 classified certain operations with digital assets as foreign exchange transactions; whether the 3.5% IOF will apply to transactions with cards in this category still depends on further regulation, and it does not currently apply.

If you already have the Picnic card and shop on foreign websites with some frequency, a dedicated virtual card in the app tackles both ends of the problem at once: the exposure of your card and the cost of each purchase. If you don't have it yet, [check the card's current availability](https://usepicnic.com/br/help/articles/novos-pedidos-cartao-picnic-temporariamente-pausados) first.

## Summary

A virtual card for international purchases is the right choice for security: your main card's number never goes to the store, a leak stays contained in a single card, you can freeze it whenever you want and you cancel a subscription by deleting its card. Prefer the permanent, renamable model over the disposable one, because only the permanent one works for recurring charges and digital wallets.

What it doesn't do is change the cost. The 3.5% IOF and the spread are still those of the account's issuer, and any content promising a "virtual card with no IOF" is not talking about the card format, it is talking about the account behind it. Also keep the real limits in mind: hotels and car rental companies may require the plastic, so may counter pickup, and deleting a card before a possible refund delays your money coming back.

Before your next international purchase, create a dedicated virtual card, give it a name, check the website's address and look at which account sits underneath. With an account that charges no IOF and no margin of its own, and keeps the loading cost visible before you confirm, the virtual card stops being just a security layer and also becomes one of the cheapest ways to pay abroad.

---

_Picnic is a technology platform that lets users independently interact with USDC, a U.S. dollar-pegged stablecoin issued by Circle, on public blockchains. USDC is not legal tender in Brazil._

_Displayed exchange rates vary with market conditions. The final applicable amount is the one shown on the transaction confirmation screen. Cryptoassets involve risks, including volatility and loss of peg._

_Picnic does not custody user assets and is neither a financial institution nor a virtual asset service provider. Sending and receiving U.S. dollar payments through a U.S. account is offered in partnership with Noah Savings Inc. Terms and conditions apply._

_Information verified in November 2026._