A reissued credit card looks like a small administrative event. The bank mails a new piece of plastic, the cardholder activates it, the old number deactivates. Most cardholders assume that is the end of it. In fact, the new card number triggers a quiet cascade of broken autopays at merchants the bank never tells about, and the same card that just got reissued is now on the fastest path to being closed for inactivity.
Reissued cards get a new number, and Visa Account Updater forwards it to only some merchants — not all. Streaming services, gym memberships, and smaller merchants frequently miss the update and keep billing the old number for months. The card itself receives no outbound charges during the gap, the inactivity clock advances, and a card that was reissued for fraud protection can quietly be closed for inactivity within a year.
Try the demo → or jump to pricingThe three reasons cards get reissued
A credit card is reissued for one of three reasons, each with slightly different timing and downstream consequences.
Scheduled expiration. The card expires at the end of the month printed on the front. A new card arrives 14 to 30 days before the expiration date. The new card has the same number, same CVV, and a new expiration date. Autopays usually keep working because the merchant has the card on file with no expiration restriction — but a meaningful minority of merchants store the expiration as a hard match and decline charges after expiration. The fix is automatic for the rest.
Fraud or compromise event. The cardholder reports a fraudulent charge or the bank detects suspicious activity. The card is immediately deactivated and a new card is issued — with a new number, new CVV, and new expiration. The old number is permanently dead. Autopays do not update automatically at most merchants. This is the failure mode that breaks things.
Product change or upgrade. Slightly less common. The cardholder converts a no-fee card to a premium card, or vice versa. The new card has a new number (or sometimes the same number, depending on issuer). Autopay behavior tracks the fraud case more than the expiration case.
Why merchants don't automatically get the new number
There is no centralized clearinghouse of card-on-file relationships. When the bank issues a new card number, it does not have a list of every merchant currently storing the old number. The cardholder is the only party that knows the full set, and most cardholders cannot recall every merchant they enrolled in autopay over the past several years.
The bank could, in principle, ask. It does not. The user experience design of card reissue at every major issuer assumes the cardholder will sort it out, and there is no proactive "we just changed your card number — here are the merchants you should update" feature anywhere in retail banking. The result is a known design gap that the industry has chosen to leave open.
Account Updater: the system that's supposed to help
Visa Account Updater (VAU) and Mastercard's equivalent (Automatic Billing Updater, ABU) exist to bridge the gap. When a merchant tries to charge an old card number, the network forwards the merchant the new number — if both the bank and the merchant are enrolled. The new number is delivered to the merchant invisibly; the next charge succeeds against the new number.
The catch: enrollment is voluntary on both sides. Large merchants — Netflix, Spotify, Adobe, the major utility companies — are enrolled. Small merchants, hosting providers, niche subscriptions, gym memberships at independent fitness studios, freelance vendors, and most charitable recurring giving are not. The split is roughly 60/40 by merchant count but heavily 90/10 by total dollar volume, which masks the failure rate on smaller subscriptions.
The other catch: Visa and Mastercard do not update card numbers for declined transactions. The merchant must attempt the charge for VAU to fire. If the cardholder has not used the autopay merchant for 90 days, the next charge attempt is the first opportunity for VAU to update — which may already be after the card has been reissued for a second time.
The dormancy double-jeopardy
Card reissue creates an unusually high dormancy risk because the autopays that were keeping the card active are the same autopays most likely to fail silently. A cardholder who had a $14.99 streaming subscription quietly maintaining card activity for 18 months can lose that activity overnight when the card is reissued for fraud.
The merchant tries the old number, the charge is declined, the merchant emails the cardholder asking them to update. The cardholder either ignores the email or never receives it. Three months later, the card is at zero activity. Three months after that, the bank's inactivity review flags it. The 90-day warning letter arrives, and the cardholder reads it as a surprise even though the underlying breakage happened six months earlier.
Finding broken autopays before the issuer notices
The cheapest audit happens within the first month of a reissue. Open the issuer's transaction history on the old card for the 12 months before the reissue. Every recurring charge on that list is a card-on-file relationship that may or may not have transitioned. Cross-reference against the new card's first month of charges — anything that posted on the old card but has not posted on the new card is a probable break.
A second-best audit happens after the card has been reissued and used for at least 60 days. Pull a list of merchants currently billing the new card and compare to the merchants billing the old card from before the reissue. Gaps are usually breakage. The fix is a single login to each merchant and an update of the card on file.
Most issuers also offer a card-on-file dashboard in the app — Chase, Capital One, and Bank of America have versions of this — that lists merchants known to have stored the card. The list is incomplete (it only includes merchants that explicitly registered the relationship), but it covers most large recurring vendors.
The cheap insurance
For one or two cards, manually auditing autopays after a reissue is feasible — it takes 30 minutes a year, on average, and catches most breakage. For five or more cards, the audit reliably fails to keep up. A single missed autopay on a high-limit card is enough to start the inactivity clock, and the cardholder usually does not discover it until the warning letter arrives.
The cheap insurance is to have at least one outbound charge per month per card that is not tied to a third-party merchant at all — a charge that comes from a source where the card number can be updated automatically the moment it is reissued. Routing one small monthly charge through a single payments source on every card means a reissue cannot silently break the activity chain.