Virtual credit cards, also known as substitute credit card numbers or controlled payment numbers, have already been around almost seven years but have never caught on despite being a free and effective layer of protection.