Card controls for teams: spending limits, MCC rules and instant freeze
Issuing cards to a team is easy; keeping spend under control is the real work. A practical look at limits, merchant-category rules, step-up authentication and freezing a card in seconds.
Handing every team member a company card used to mean handing over risk. Modern card issuing flips that: each card is a programmable object with its own limits, rules and controls, so you can distribute spending power widely while keeping tight control over how, where and how much is spent. The point is not to lock people down — it is to let them move fast within boundaries you set once and can change instantly.
Spending limits that match the job
The most basic control is the limit, and the useful version is granular. Rather than a single credit line, you can set per-transaction ceilings, daily caps and monthly budgets on each card independently. A card for a marketing manager buying ad credits looks nothing like a card for occasional travel expenses, and it should not have to. Setting limits at the card level means a mistake or a compromised card is contained to that card's budget, not the whole account.
Merchant-category rules
Every card transaction carries a Merchant Category Code (MCC) that identifies the type of business — airlines, restaurants, software, cash withdrawal and so on. MCC rules let you allow or block whole categories on a given card. A card intended for software subscriptions can decline a cash withdrawal or a gambling merchant automatically, before the transaction ever completes. This is far more robust than after-the-fact policy, because the control lives in the authorisation itself.
- Per-transaction, daily and monthly limits set independently on each card.
- Allow or block merchant categories such as ATM withdrawals, travel or entertainment.
- Online, in-store and international toggles to match how a card is meant to be used.
- Instant freeze and unfreeze without cancelling or reissuing the card.
Freeze first, ask questions later
When something looks wrong — a card left in a taxi, an unexpected charge, an employee off-boarding — the right first move is to freeze the card. A freeze blocks new authorisations immediately and is fully reversible, so you can investigate without the pressure of a permanent decision. It is the fire extinguisher of card management: rarely needed, invaluable when it is, and far less disruptive than cancelling and reissuing.
Step-up authentication for sensitive actions
Not every action deserves the same level of trust. Step-up authentication asks for an extra factor — a passkey or a strong confirmation — before high-risk operations such as viewing full card details, raising a limit or approving a large transaction. It keeps everyday use frictionless while placing a deliberate speed bump in front of the actions that would hurt most if they were taken by the wrong person.
Good card controls are invisible when everything is normal and decisive the moment it is not.
