January 12, 2022

Sharing corporate cards? Why it’s dangerous to sacrifice security for convenience

Jump to sections
Spending made smarter
Easy-to-use cards, spend limits, approval flows, vendor payments —plus an average savings of 3.5%.
Get fresh finance insights, monthly
Time and money-saving tips,
straight to your inbox
Thanks for signing up
Oops! Something went wrong while submitting the form.

Many companies think that by limiting the number of corporate cards they issue that they have more control over their finances. However, the exact opposite is true.

Imagine your typical department head: they likely have a single corporate card and probably 15–20 employees that work under them. What happens when these employees need to make a purchase? Ideally, the manager reviews the request and purchases the item with their corporate card. However, it is more likely that the manager doesn’t want to deal with the hassle and lets the employee borrow their corporate card. At this moment, corporate financial control is lost.

This scenario plays out more often than any organization would like to think or acknowledge. And, unfortunately, each time it happens, the company is exposed to security risks that can result in significant financial losses.

The 3 keys to organizational security



Your company’s security hinges on something we call the “CIA triad” in infosec: 

  • Confidentiality - Is data accessible only by authorized users? 
  • Integrity - Is the data and information entered into your systems accurate? Is the data being altered or misused?
  • Availability - Are employees able to access the information they need when they need it?

You may be limiting the number of cards you issue to address these very issues, but ironically this actually exposes you to risk in every one of these areas. 

Confidentiality: Limiting cards exposes sensitive information

A corporate card is like the password to your email—it gives access to sensitive data. These days, we all know better than to share our passwords. So why aren’t we more vigilant about securing our corporate cards? 

When a card is out of view of the cardholder, being used by an unauthorized person, spending is out of their control and there is an opportunity for fraud. 

And this risk isn’t limited to the physical card being out of view. If cardholders share card information via email or other unsecured digital means, they don’t know where that card information is stored or how it is used. For example, an employee may share credit card information with a vendor via email, and that vendor can take the information and make fraudulent charges.

Integrity: Limiting cards creates a lack of visibility into spend

Here’s the thing about limiting the number of cards you issue:

In 99% of cases, you’re just limiting your visibility into your employees’ spending, not preventing overspending itself.

This is especially true if you use traditional corporate cards, like Amex, that aren’t backed by finance software to track real-time spending and automate receipt collection. There’s no easy way for you to track who’s spending company dollars, for what purpose, and get the documentation you need to close your books.  

Availability: Limiting cards creates friction and wastes time

Without their own card, many employees simply borrow a card or resort to spending out of pocket and filing for reimbursement. The manual process of submitting expense requests, waiting on approval, and submitting all of the required documentation creates a huge time drag for everyone.  

Manual expense processes don’t just create friction in terms of the acquisition of goods and services; they also create friction between controllers and employees.

Many employees get frustrated feeling like their organization will trust them to do their job but not spend the money necessary to do it.

Manual processes often feel like a hurdle rather than a safeguard.

On the flip side, controllers are put in an awkward position trying to headhunt people for missing documentation or spending that is outside of the corporate credit card policy. Due to lack of visibility, this often happens after the fact, creating even more strain on the relationship.

How to increase financial security without losing efficiency   

The idea of issuing corporate cards to all of your employees may sound like a catastrophe waiting to happen. And it certainly is—if it isn’t supported by the right controls and workflows.

But these days advanced corporate cards come with built-in automation that allows you to maintain financial security without sacrificing employee efficiency. That should be music to the ears of anyone working in infosec or finance!

Here’s how you can incorporate them into your security best practices. 

1. Issue virtual cards for specific business needs 

Automation makes it possible for finance teams to issue virtual cards in seconds. By issuing individual cards as business needs arise, you eliminate the need for people to share cards with unauthorized users. No more confidentiality issues. 

Spot an issue with how a card is being used? Simply disable it with a single click via your card software or easily implement controls to restrict its usage.  


2. Approve spending before it happens 

I don’t simply mean approving budgets every quarter. You can use automation to route card requests for approval before they get issued to ensure that company funds are being used for valid reasons. It also allows finance teams to track spending in real time, giving them the visibility they need.


3. Implement personalized card controls to prevent misuse

Once approved, set controls on cards to ensure they’re being used properly. For example, you can assign a virtual card for each software vendor and set a recurring spend limit for the amount that the employee expects to spend. Not only does this prevent employees from misusing cards but it also prevents vendors from stealing card details or overcharging. This best practice along with the one above covers you on the integrity front.


4. Get real-time alerts on suspicious transactions 

Another important aspect of organizational security is the ability to catch and act on issues in real time. We call this the “OODA loop”: observe, orient, decide, act. 

Most finance teams don’t have the time to inspect every minute transaction for fraudulent activity. Automation that triggers alerts for transactions over a certain amount helps finance teams close the “OODA loop.”


5. Allow all of your employees to request cards

Yes, really. With cards that prevent out-of-policy spending and real-time monitoring, you can finally issue company cards to all of your employees with confidence. People can do their work faster and more efficiently because they’re able to access the company budget they need for their projects, when they need it. Empower your employees.


Evolve your finance operations

The practice of sharing corporate cards has long been seen as a necessary evil because organizations want to move fast. But moving fast while putting your security at risk ultimately slows you down. Thankfully, finance automation removes the need to choose between control and convenience within your finance operations. Employees’ need for speed no longer has to come at the expense of your organization’s security.

Information Security Lead, Ramp

Jonathan has served as a subject matter expert for security programs at a number of companies, specializing in cybersecurity risk and strategy.


How Crossbeam saved $10K+ with Ramp Price Intelligence

“Right now, I text a group of colleagues and search online—but being able to know within a 5% variance that we are solid on pricing? That gives me peace of mind."
Matt Dougherty, Senior Director of Finance, Crossbeam

How Clearbit closed the books >60% faster with Ramp + NetSuite

“Before Ramp, our month-end close took approximately 10 days. Now it takes three to four days—it's unbelievable.”
Kay Coolican, Accounting Manager, Clearbit

How Ramp helped Webflow lay a foundation for sustained growth

“This product allows us to enable our employees to be full-time right away, Ramp allows us to onboard people quicker, it allows us to get them the tools they need, which in many cases they need to be able to spend in order to grow.”
Ivan Makarov

How Candid expanded internationally with Ramp

“Ramp found over $250,000 in savings right out of the gate. That is far more valuable than any points program.”
Nick Greenfield, CEO, Candid

How FirstBlood’s switch to Ramp sped up their monthly close

“If I code one transaction with a certain vendor, Ramp knows. It makes suggestions based on past transactions. It just works.”
Kyle Potter, CFO, FirstBlood

How Elementus overhauled its spend management with Ramp

“The fact that I can have an expense, match it with a receipt immediately, upload it, and then integrate it into QuickBooks is a godsend.”
Matt Austin, Vice President of Operations, Elementus

How Eight Sleep consolidated their finance stack and launched a new product with Ramp

“Identifying the invoice, finding it in Ramp Bill Pay, and flexing it from there, takes all of one minute…it’s only a few clicks and you’re done.”
Irish Rose, Controller, Eight Sleep

Get started for free

Cards, expenses, bills, and accounting – beautifully reimagined by experts to save you time and money.
Error Message
No personal credit checks or founder guarantee.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.