It's a virtual card, generated in the banking app, to be used one single time. The card never existed outside the bank IT systems or the phones involved in the communication.