Mastercard has raised the stakes in corporate payments. Its upgraded virtual card platform promises tighter security, easier connections and better control for global businesses.
The changes apply to Mastercard In Control, its virtual card number platform. Mastercard announced them on 23 July 2026 in the United States. Its Asia-Pacific newsroom carried the announcement on 24 July.
The timing matters for travel. Airlines, hotels, wholesalers and travel managers handle complex payment chains every day. One booking can involve several suppliers, currencies and settlement dates. Refunds and changes add more moving parts.
A virtual card can make that process cleaner. It creates a separate card number for a set payment. The buyer can limit the amount, merchant, use and expiry date. It is rather like giving each booking its own wallet, then removing the temptation to wander off with the housekeeping money.
Mastercard says its virtual card network now supports transactions across 43 countries and 174 currencies. It includes card issuers, direct platforms and corporate users. That reach gives global businesses a more consistent way to pay suppliers across many markets.
New controls put issuers in the driving seat
The first major upgrade is called Issuer Enforced Controls. It allows a bank or card issuer to set rules when a virtual number is created.
Those rules can include a spend limit, a cap on each transaction and a validity period. They create a base level of control before anyone uses the card. Mastercard says this can reduce fraud and help ensure compliant settings are in place from the start.
The wording matters. Mastercard’s Asia-Pacific release uses “compliant controls”. One United States version displays “complaint controls”, which appears to be a typographical error rather than a new branch of customer service.
Mastercard has also improved its Clearing Controls. These checks continue after the first payment approval. They apply when the transaction moves into clearing and final settlement.
That extra step can catch a mismatch that was not clear at authorisation. A business can block an invalid transaction, apply a more exact rule or manage when the payment clears. It can also manage policies from one central point as the programme grows.
Citi is already using both sets of controls. It is expected to become the first issuer to roll them out worldwide later in 2026.
Scott Southall, global head of Citi Commercial Cards & Domestic Payments, said the tools would help clients manage risk and streamline payments.
“As virtual card adoption accelerates, our clients need smarter, stronger tools to manage risk,” Southall said.
Fraud claim will attract finance chiefs
Security is a central part of Mastercard’s case. The company says fraud rates on virtual cards are less than one-fifth of those on non-virtual cards. It says the rate is lower again for cards issued through Mastercard In Control.
That figure comes from Mastercard’s own data. It is not an independent market benchmark. Even so, it is a strong claim and will interest finance leaders who manage high payment volumes.
The platform also uses network security, tokenisation and fraud monitoring. Tokenisation replaces sensitive card details with a digital token. This can reduce the exposure of the original account information. Mastercard also promotes controls at both the authorisation and clearing stages.
For travel businesses, the benefit is practical. A payment can be tied to one booking or supplier. If details change, the exposure can be limited to that transaction rather than a shared corporate card.
One API aims to remove payment plumbing
The second major upgrade concerns integration. Mastercard’s Commercial Connect API acts as one access point for virtual card services.
An API allows different software systems to exchange instructions. In this case, a business can create a virtual card and start a payment in one flow. It can also set several control groups at the main card level. Those rules can then apply across linked virtual cards.
The aim is to remove duplicated work. Edgar, Dunn & Company says 69 per cent of businesses struggle with poor links between payment tools and business systems.
That problem is easy to recognise. Staff may copy data between an accounts system, a bank portal and a booking platform. Each extra screen adds time. Each manual step also adds another chance for a mistake.
Marc Pettican, Mastercard’s global head of Corporate Solutions, said demand for better performance and control was rising.
“Expectations for performance, security and control are higher than ever,” Pettican said.
Travel payments move into the booking workflow
Mastercard launched its embedded virtual card programme in March 2025. It allows payment tools to sit inside software that a business already uses.
Partners have joined from expense management, accounts payable and enterprise software. Travel, hospitality, healthcare and e-commerce platforms are also taking part.
In travel, Mastercard lists Juniper Travel, HBX Group and TravelSoft among its partners. HBX Group and Mastercard have also launched a virtual payment programme for travel intermediaries.
The logic is sound. Travel payments should follow the booking workflow. Staff should not need to leave a reservation system, open another portal and type the same details again.
HBX Group has called managing travel payments “one of the industry’s biggest challenges”.
The partnership aims to connect bookings and payments more closely. That can support faster reconciliation and clearer records across the travel chain.
Mastercard and HSBC have also launched a mobile virtual card service in the United Arab Emirates. It places tokenised virtual numbers into digital wallets. Business users gain mobile convenience while finance teams retain company controls. HSBC became the first global bank to launch the capability in the UAE through Mastercard In Control for Mobile Payments.
SAP has also enabled its partnership through Mastercard’s embedded programme. The work is intended to bring virtual card payments into existing finance processes and add more automation to accounts payable.
What the upgrade means for travel sellers
For travel companies, the gains may include better reconciliation and tighter supplier controls. A virtual number can show who was paid, when the payment occurred and which booking it covered.
It may also limit risk when supplier details change. Multi-currency payments can be managed through a common programme. Finance teams can set policy once, rather than rebuild it for each booking channel.
Mastercard says its In Control platform can collect detailed invoice data, support cross-border payments and generate virtual numbers inside existing enterprise software. These functions could make reconciliation faster and give travel businesses a clearer payment trail.
Yet virtual cards are not magic. Suppliers must accept them. Systems must be set up well. Booking data must be accurate. Staff also need a clear process for changes, cancellations and refunds.
No smart platform can repair a poor payment process simply by giving it a digital hat.
Still, Mastercard’s expansion marks an important shift. Virtual cards are moving beyond a specialist finance product. They are becoming part of the basic machinery of global business travel.
The old company card has not vanished. It has simply gained a shorter leash, sharper eyesight and a chaperone who checks the bill.
By: Prae Lee – © 2026.
Read Time: 5 minutes.
Author Bio:
You can tell a great deal about a person by how they meet a Bangkok morning. Prae Lee doesn’t charge into it; she glides, unhurried, as if time itself has agreed to behave. There is a calm assurance about her, the sort earned by knowing both your roots and your destination.
A graduate of Chulalongkorn University, she took her business degree with quiet pride, then polished it further in Singapore and Australia. Travel didn’t change her. It refined what was already there: curiosity, discipline, grace.
Back in Bangkok, she slipped modern life into the family business, mastering social media with an instinct for listening and selling with Thai gentleness.
Prae never seeks attention, yet everything she touches grows brighter.
Now with Global Travel Media, she writes with authenticity, drawing on culture, travel and a rare, steady confidence.
