Mastercard boosts security with new payment features
Mastercard has expanded its virtual card platform with new security controls, a unified API, and an embedded payments network to simplify how businesses manage digital transactions.
New controls reduce fraud risk at every stage
The latest updates to Mastercard In Control introduce two security features: Issuer Enforced Controls and improved Clearing Controls. Issuer Enforced Controls let banks establish baseline rules—such as spend limits, transaction caps, and validity periods—when a virtual card number is generated. Clearing Controls, introduced last year, now extend validation beyond authorization into the clearing stage, enabling businesses to block invalid transactions and manage payment timing more precisely.
Fraud rates on virtual cards remain less than one-fifth of those on physical cards. When issued through In Control, the rate declines further. The lower figures stem from network-level security, tokenization, and real-time fraud monitoring built into the platform.
Citi became the first issuer to adopt both controls, with plans for a global rollout later this year.
The platform now supports 43 countries and 174 currencies. It ensures consistent oversight as programs grow.
Related: NatWest Integrates Open Banking and Cybersecurity for Payments
A single API simplifies integration
The Commercial Connect API, called the market’s only single-API gateway by Kaiser Associates, aims to reduce the complexity of integrating virtual card programs.
The API allows multiple control sets to apply at the card level, enforcing rules across all transactions without handling sensitive credentials. It also merges virtual card creation and payment initiation into one step, speeding up implementation.
Marc Pettican, Mastercard’s Global Head of Corporate Solutions, said the enhancements meet rising expectations for performance and security as payments integrate deeper into business workflows. Virtual card capabilities now deliver more unified and scalable experiences.
Kaiser Associates recognized the integration model as industry-leading for reducing onboarding complexity. Spencer Dunham, Vice President at Kaiser, noted that providers now compete on operational maturity, configurable controls, and ERP connectivity.
The expansion extends beyond software. The platform also supports industry-specific use cases. In travel, partnerships with Juniper Travel, HBX Group, and TravelSoft streamline payment processes. Sofoklis Limniotis, Strategy & Solutions Director at HBX Group, said the collaboration combines travel expertise with a global payments network’s scale and security.
Related: How to Customize Your Wedding Band to Complement Your Engagement Ring
For e-commerce, Mastercard In Control handles real-time transactions at scale, focusing on availability and resilience. The company states the platform ensures smooth, secure, and dependable payment experiences even during high-volume periods.
Emburse, which named Mastercard its Innovation Partner of the Year, integrated the platform into its procurement and expense workflows. Kalie Phillips, Vice President of Product Management at Emburse, said the partnership makes virtual cards a seamless part of business operations.
Businesses increasingly adopt virtual cards for their flexibility and security. While the technology has existed for years, the move toward embedded payments and tighter controls signals a shift away from traditional card programs. If the trend continues, virtual cards may become the standard for B2B transactions within a few years—not because they cost less, but because they simplify management at scale.
Adoption varies. Smaller businesses often lack the infrastructure to integrate virtual cards, and some industries remain cautious about digital-only payments. For now, growth comes mainly from enterprises and financial institutions already pursuing digital transformation.
Mastercard’s focus on a single API and pre-built integrations could lower these barriers. If successful, the strategy may redefine how businesses approach payments entirely.
