Wafir.maWafir.ma
💰 Personal finance

Virtual Cards in Morocco 2026: Secure Online Payment Guide

Updated on May 16, 20269 min read

Moroccan e-commerce exploded in 2024-2026: MAD 5.8 billion in online transactions in 2025 per CMI (+34% vs 2024). But online bank card fraud too: 28,000 phishing/skimming cases reported in 2025. The virtual card (e-card) is the technical answer to this risk: a 100% digital Visa/Mastercard card with UNIQUE and DISPOSABLE number, generated on demand for a specific purchase. You NEVER communicate your real bank card to the merchant. In 2026, 4 Moroccan banks offer free virtual cards: Attijariwafa, BMCE Bank, CIH Bank, Société Générale.

1. 1. What is a virtual card?

A virtual card is a 16-digit bank card number (+ expiration date + CVV) dynamically generated, valid once OR for specific cap OR for limited duration.

Generation mechanism

Step 1: connect to your bank's app. Step 2: "Virtual card" section. Step 3: choose parameters. Step 4: instant generation. Step 5: use on e-commerce site. Step 6: automatic debit on your account. Number becomes INVALID after use.

Difference from classic bank card

Classic card: single PERMANENT number. If site hacked, number stolen, your card compromised. Virtual card: DISPOSABLE number, short expiration, no risk.

When to use a virtual card?

(1) Purchases on international sites NOT 3D Secure certified. (2) Recurring subscriptions. (3) First purchase at unknown merchant. (4) Purchases on suspicious sites. (5) Exact-amount purchases for budgeting.

2. 2. 2026 4 Moroccan banks comparison

4 banks actively offer virtual cards in 2026.

Attijariwafa Bank — Wafa Pay e-card

Available since 2018, integrated in Wafa Pay app. FREE and unlimited. Unit cap MAD 50,000. Configurable validity. 3D Secure compatible.

Bank of Africa BMCE — BMCE e-card

Service integrated in BMCE Direct app since 2020. FREE for BMCE clients. Unit cap MAD 30,000. Specificity: linked to temporary account.

CIH Bank — CIH Virtual

Launched 2022 in CIH Mobile app. FREE for CIH clients. Cap MAD 40,000. Specificity: "supplier card" option.

Société Générale Morocco — SG e-shopping

More traditional service, integrated in SG online Personal Space. FREE for SG clients. Cap MAD 25,000.

3. 3. 2026 3D Secure standard

3D Secure is the international banking security protocol adding strong authentication step.

How 3D Secure works

Step 1: you enter card info on e-commerce site. Step 2: site contacts issuing bank. Step 3: bank sends SMS code to your mobile. Step 4: you validate. Step 5: transaction confirmed.

Sites supporting 3D Secure in Morocco 2026

ALL CMI-approved Moroccan e-merchants support 3D Secure since 2023. International sites: most major actors.

Problematic cases (non-3DS sites)

Some international sites still refuse 3D Secure. Solution: systematically use VIRTUAL CARD.

4. 4. Practical security: 7 golden 2026 rules

7 behavioral rules to protect your banking data online.

Rule 1 — Always verify URL before payment

Before entering your card, verify: (a) HTTPS protocol, (b) exact URL, (c) valid SSL certificate.

Rule 2 — Systematically refuse card saving

When site offers "Save card for future purchase": REFUSE.

Rule 3 — Prefer virtual card for international purchases

For any non-Morocco/EU purchase, use a virtual card.

Rule 4 — Activate real-time payment notifications

All Moroccan banks offer instant SMS or push notifications for each card transaction.

Rule 5 — Never enter national ID or banking password online

No legitimate merchant will ask for your national ID or banking password. If site does: certain PHISHING.

Rule 6 — Check recurring subscriptions 1x/month

On your monthly statement, identify all recurring debits. Cancel unused ones.

Rule 7 — Regular update of online banking password

Change app/site banking password every 6 months minimum. Use STRONG password.

5. 5. 2026 virtual card limits

Despite security advantages, virtual cards have some practical limits.

Not usable for physical payments

A virtual card only exists digitally — impossible to use at physical POS.

Generation delay for urgent purchase

Generation requires 30-60 seconds. For very urgent purchase, can be constraining.

Some merchants reject virtual cards

Few rare merchants detect and refuse virtual cards: long-term subscriptions.

No purchase insurance

Gold/Platinum card "new purchase" protections generally don't apply to virtual card payments.

6. FAQ

Q.What is a virtual bank card in Morocco 2026?
A virtual card (or e-card) is a 16-digit bank card number dynamically generated by your bank, valid for a single transaction or for specific cap. No physical card exists. You use it on e-commerce site like a normal card, but number becomes invalid after use. Available free at Attijariwafa, BMCE Bank, CIH Bank, Société Générale.
Q.How to create a Wafa Pay virtual card in Morocco 2026?
Procedure: (1) Connect to Wafa Pay app. (2) Menu "Cards" → "Virtual card" → "Create new virtual card". (3) Set parameters. (4) Biometric authentication. (5) Instant generation. (6) Copy-paste on e-commerce site. FREE and unlimited service.
Q.Is a virtual card safer than a classic bank card in 2026?
Yes, much safer for online payments because the number is DISPOSABLE. If merchant site is hacked after your purchase: stolen virtual card number is ALREADY INVALID. 2026 recommendation: systematically use virtual card for any non-Morocco purchase.
Q.Does 3D Secure really protect online payments in Morocco 2026?
Yes, it's the MAIN PROTECTION today against online card fraud. Mechanism: at each payment, your bank sends SMS code to your mobile — without this validation, transaction REFUSED. Even if fraudster has your card info, can't finalize purchase without your mobile too.
Q.What is the maximum cap of a Wafa Pay virtual card in 2026?
Unit cap MAD 50,000 per generated virtual card. No limit on number of virtual cards generated per month. For BMCE e-card: cap MAD 30,000. CIH Virtual: MAD 40,000. SG e-shopping: MAD 25,000.
Q.Can I use a virtual card for my Netflix/Spotify subscriptions in Morocco 2026?
Yes, perfectly suited to recurring subscriptions. Recommended strategy: create REUSABLE virtual card with exact monthly cap. Advantages: merchant can't charge more than cap, simple cancellation, if fraud on this merchant, your real bank card stays intact.
Q.Can a virtual card be used to buy on AliExpress or Shein in 2026?
Yes, without problem. These international sites accept all Visa/Mastercard cards. STRONGLY RECOMMENDED for these platforms because AliExpress and Shein don't support all payments in 3D Secure. Virtual card completely isolates your real bank card from these risky purchases.

Secure Your Online Payments

Discover the virtual card suited to your bank and learn the 7 golden rules.

Compare virtual cards

Related guides