Mastercard has moved to sharpen its position in the competitive business-to-business payments arena, unveiling a significant set of enhancements to its Mastercard In Control virtual card number platform. The upgrades — encompassing new security controls, consolidated single application programming interface access, and expanded embedded payments capabilities — are designed to give enterprises and financial institutions the tools to manage virtual card programs with greater security, visibility, and scale. The announcement, made on Thursday, July 23, 2026, signals the payments giant's ongoing commitment to modernizing the infrastructure that governs how businesses authorize, track, and settle commercial expenditure.
What Mastercard In Control Does — and Why It Matters Now
Virtual card numbers have long occupied a specialist niche in the B2B payments landscape, prized for their capacity to generate unique, transaction-specific card credentials that reduce fraud exposure and improve spend traceability. Mastercard In Control has served as the company's flagship platform in this space, enabling issuing banks and their corporate clients to embed rules-based controls directly into the payment credential itself — governing where, when, and for how much a virtual card can be used. The latest round of enhancements represents an evolution of that foundational promise, moving the platform toward a more integrated, developer-friendly, and enterprise-ready architecture.
The timing of these upgrades is deliberate. B2B payments remain one of the most structurally complex and underdigitized segments of global commerce. Accounts payable workflows, supplier disbursements, travel and expense programs, and procurement processes still rely heavily on manual intervention, paper-based reconciliation, and legacy banking rails. Virtual card technology addresses many of these frictions directly — but only if the underlying platform can operate at enterprise scale, integrate cleanly with existing financial systems, and provide the security guarantees that corporate treasury teams demand. Mastercard's enhancements target each of these pressure points simultaneously.
Single API Access: A Developer-First Approach
Perhaps the most architecturally significant of the new features is the introduction of single API access for the In Control platform. Previously, integrating virtual card capabilities into enterprise resource planning systems, travel management platforms, or proprietary treasury tools required navigating multiple integration touchpoints — a complexity that slowed deployment timelines and increased the operational burden on corporate technology teams. By consolidating access through a unified API layer, Mastercard is effectively lowering the barrier to entry for both financial institutions building virtual card issuance products and for the enterprises that ultimately consume them.
This move mirrors a broader industry pattern in which infrastructure providers are rearchitecting their platforms around application programming interface-first design principles. The goal is to make payment capabilities composable — capable of being embedded into any workflow, any software environment, and any channel where a payment needs to occur. For Mastercard, a single API gateway for In Control means faster time-to-market for issuing partners, smoother integrations for corporate clients, and a more defensible platform position in a market where competitors including Visa's commercial solutions division and a growing roster of fintech specialists are actively contesting the B2B virtual card space.
Expanded Embedded Payments and Security Controls
The enhanced embedded payments capabilities within In Control extend the platform's reach into the workflows where B2B spending decisions are actually made — procurement software, expense management tools, and accounts payable automation platforms. Embedding payment functionality directly into these environments eliminates the friction of switching between systems and provides real-time authorization data at the point of decision, rather than after the fact during reconciliation cycles.
On the security front, the new controls reinforce the core value proposition that has always made virtual card numbers attractive to corporate buyers: the ability to restrict a payment credential to specific vendors, transaction amounts, date ranges, and spend categories. Expanded security parameters give treasury and compliance teams a finer-grained set of instruments to enforce spending policy, reduce maverick expenditure, and create audit trails that satisfy both internal governance requirements and external regulatory scrutiny. For financial institutions managing virtual card programs on behalf of large enterprise clients, these controls translate directly into reduced fraud liability and stronger client retention.
What This Means for the B2B Payments Market
Mastercard's enhancements to In Control arrive at a moment when the B2B payments sector is drawing unprecedented attention from investors, technology firms, and incumbent banks alike. The structural shift toward digital procurement, the acceleration of accounts payable automation, and the growing appetite among corporate treasurers for real-time spend visibility have converged to create a significant commercial opportunity for platforms that can deliver integrated, scalable virtual card infrastructure.
For enterprises evaluating their commercial card programs, the updated In Control platform offers a more compelling case for virtual card adoption at scale — one grounded in consolidated integration architecture, tighter security policy controls, and deeper embeddability within existing operational software. For the financial institutions that issue these products, Mastercard's investment in platform modernization represents both a competitive differentiator and a signal that the network is committed to supporting the evolution of commercial payments well beyond the capabilities of traditional corporate card programs. The direction of travel is clear: B2B payments infrastructure is being rebuilt for the API economy, and Mastercard is staking its claim to a central role in that transformation.
Written by the editorial team — independent journalism powered by Codego Press.