How to keep your ad card details safe

The cards that pay for advertising lead busy lives. They get added to several ad accounts, passed between teammates, discussed in client threads and sometimes pasted into spreadsheets "just for now." Every one of those moments is a chance for card details to end up somewhere they shouldn't.

You can't make any card perfectly safe, but you can make leaks rare and their damage small. Here are the habits that matter most.

Treat card details like cash

A card number, expiry date and security code are enough for someone to attempt a charge. That's the whole point of a card — and the reason the three together deserve the same care as banknotes.

• Don't paste full card details into chats, emails or shared documents. Messages get forwarded, documents get shared with the wrong link settings, and both stay searchable for years.
• Don't store them in a browser's autofill on shared computers. Anyone using that profile can use the card.
• Don't send screenshots of the card. Images are easy to forward and hard to retract.

If a teammate needs to add a card to an ad account, it's better for the person who manages the card to add it themselves, or to do it together on a call, than to send the details in writing.

Keep the card where it lives

At BuyAdsCard, card details live in your dashboard. The number, security code and expiry are stored encrypted, and the full details are only shown once you type the current six-digit code your authenticator generates. They hide again automatically after a minute.

That design is only as good as the way it's used:

• Reveal details only when you need them — typically when adding the card to an ad account.
• Close the dashboard when you step away, especially on a shared or public computer.
• Keep authenticator and recovery codes to yourself — even when someone says they work for support. Our team will never ask for them.

Limit what any one card can lose

The best protection against a leaked card is a card that can't lose much. Prepaid cards help here by design: they can only spend their loaded balance, and they have no connection to your bank account.

Two habits multiply the effect:

1. One card per budget. When each client, campaign or month has its own card, a problem with one card affects one budget. One card per client explains how to organize this.
2. Load what the budget needs. A card holding a month's budget for one campaign is a much smaller target than a card holding everything.

Secure the ad accounts, not just the cards

A card is often stolen indirectly, by getting into the ad account where it's saved. Someone with access to an ad account may be able to run ads charged to your card even without ever seeing the number.

• Turn on two-factor authentication on every ad account and on the email address behind it.
• Use separate logins for each person rather than a shared password.
• Review who has access regularly, and remove people who no longer need it.
• Watch for unexpected campaigns or changes to billing settings.

Recognize phishing aimed at advertisers

Advertisers receive convincing fake emails: "your ad account is restricted," "your payment failed," "verify your billing information." They often link to a page that looks like a platform's login or billing screen.

• Don't follow links in unexpected billing emails. Open the platform or your dashboard directly, the way you normally would.
• Check the sender's address carefully, but don't rely on it alone — addresses can be faked.
• Be suspicious of urgency. "Act within one hour or your account will be deleted" is a classic pressure tactic.

Write a one-page card policy for your team

Habits stick better when they're written down. If more than one person touches your ad spend, agree a short policy everyone can follow. It doesn't need legal language — a few lines in your team's handbook will do:

• who is allowed to order cards and reveal their details;
• which ad accounts each card may be added to;
• where card details may never be written (chats, email, shared drives);
• how quickly access is removed when someone changes role or leaves;
• who to tell, and how, if anyone suspects a problem.

Review it whenever your team or client list changes. A policy that reflects last year's team quietly stops protecting anything.

Know what to do if something looks wrong

If you see a charge you don't recognize, a campaign you didn't create or a login alert you can't explain:

1. Remove the card from any ad account where you suspect a problem.
2. Change the passwords of the affected ad account and its email, and switch on two-factor sign-in wherever it was missing.
3. Tell support through a ticket in your dashboard; the team can look at the card and freeze it if that makes sense.
4. Move remaining campaigns to a new card once the cause is understood.

Speed matters more than perfection. A card that's removed quickly can't be charged again.

Frequently asked questions

Are virtual cards inherently safer than plastic ones?

It removes some risks — there's nothing to lose or skim in a shop — but its details can still leak online. The safety comes from how you store, share and limit it, which is why the habits above matter.

Can I give a freelancer my card number?

You can, but it increases risk. A safer approach is to add the card to the ad account yourself and give the freelancer access to manage campaigns, not to the card details.

What does BuyAdsCard do if it suspects misuse of a card?

A card can be frozen while unusual activity is checked. Any status change triggers an email to you, and support can walk you through what happens next. You can read more about how cards are issued and managed on how it works.

Summary

Keep card details out of chats and documents, reveal them only when needed, limit each card to one budget, secure the ad accounts where cards are saved, and act fast when something looks off. Combined with a prepaid card's built-in limit, those habits keep a leak small — and rare. If you're just getting started, how to pay for online ads with a prepaid virtual card covers the basics of adding a card safely.