My bank (Citi) has actually offered virtual account numbers for close to a decade - their original implementation used a Flash web app (ostensibly for security?

My bank (Citi) has actually offered virtual account numbers for close to a decade - their original implementation used a Flash web app (ostensibly for security?) but now thankfully it’s a more standard HTML5 setup. They can be used at any online shop, have customizable credit limits and expiry dates, and you can enter whatever billing details you like. It’s a great solution. Payments still settle to your real credit card in the end, obviously, but the merchant never gets to see that info. Similarly, my understanding is that Apple Pay (and probably Google Wallet?) do a similar thing: they roll a random virtual account number and pay with that.