I like the start, but in a strange way I then think the premise gets sidetracked. It almost feels like two different stories. It feels like it should either become a mistaken identity story, whereby as he used the card those after the real spy, but have no idea what he looks like, come for this guy or he starts using it to live the spy lifestyle, only to be caught up in a real plot.

The premise could work, as I assume the dummy card is actually a government device to be used on the real spy’s mission, which is meant to be abroad so when he uses it, will bring down the system. Now the spy not wanting to admit his mistake teams up with the person who stole it to disable the virus before it reaches it’s activation point (Which could be a spread level) I guess, for me, your current one feels disjointed however I think with some focus on why these characters would work together then it’ll work for the bigger picture.

Hope that makes sense