A standard credit card has 16 digits, though some cards have 14 or 15
The number on the front of your card is called the Primary Account Number, or PAN. Most cards issued by Visa, Mastercard, and Discover have 16 digits. American Express cards have 15 digits. Some older cards or specialty cards may have 14 digits, but 16 is the current standard for most people.
These digits are not random. Each one serves a specific purpose in how the card works, how transactions are processed, and how the card issuer identifies your account. Understanding what each section does helps you spot errors on statements, protect yourself from fraud, and know what information is actually necessary when you use the card.
Key Takeaways
- The first digit identifies the card network (Visa, Mastercard, American Express, or Discover), and the first six digits together identify your bank and card type.
- Digits 7 through 15 (or 14 for some cards) are your unique account number assigned by your bank.
- The final digit is a check digit that validates the entire number using a mathematical formula called the Luhn algorithm.
- The three or four digits on the back of your card (the CVV or CVC) are separate from the main card number and are required for online and phone purchases.
- You should never share your full card number, expiration date, or CVV with anyone except during an authorized transaction with a merchant you trust.
The first digit: which network issued your card
The very first digit tells you which payment network your card belongs to. A card starting with 4 is a Visa card. A card starting with 5 is a Mastercard. A card starting with 3 is an American Express or Diners Club card. A card starting with 6 is a Discover card.
This digit matters because it determines which payment network processes your transaction, which merchants accept it, and which rules govern how disputes are handled. It does not determine your bank or your credit limit — that information comes from the digits that follow.
Digits 2 through 6: your bank and card type
The first six digits together form what is called the Issuer Identification Number, or IIN. This identifies your specific bank and the type of card you hold. For example, one six-digit sequence might mean "Visa card issued by Chase," while another means "Mastercard issued by Bank of America."
Banks and card networks use this number to route your transaction to the correct processor and to apply the right rules for rewards, fraud protection, and dispute handling. When you call your bank's customer service number on the back of your card, they use this number to pull up your account instantly.
Digits 7 through 15: your account number
The middle section of your card number is your unique account identifier. This is the part that distinguishes your account from every other account at your bank. If you have multiple cards from the same bank, each one will have a different account number in this section.
When you make a purchase, the merchant's system sends this number to your bank along with the transaction amount. Your bank uses it to find your account, check your available credit, and decide whether to approve the charge. This is also the number that appears on your monthly statement next to each transaction.
The final digit: the check digit that prevents errors
The last digit of your card number is called the check digit. It is calculated using a mathematical formula called the Luhn algorithm, which uses all the other digits on your card to generate this final number. The purpose is to catch typos and fraud.
When you enter your card number online or over the phone, the merchant's system runs the Luhn algorithm on the digits you provided. If the check digit does not match what the algorithm produces, the system rejects the number as invalid before it even reaches your bank. This prevents a mistyped digit from being sent to your account.
The CVV or CVC: the three or four digits on the back
The three-digit number on the back of your card (or four digits for American Express) is separate from your main card number. Visa and Mastercard call it the CVV (Card Verification Value). American Express calls it the CID (Card Identification Number). Discover calls it the CVC (Card Verification Code).
This number is not stored in the magnetic stripe or chip on your card — it is printed on the card itself. Merchants are required to ask for it during online and phone purchases because it proves you physically have the card in your hand. If someone has only your card number and expiration date, they cannot complete an online purchase without this code.
Never enter your CVV into a form that will be saved or stored. Legitimate merchants ask for it only at the moment of purchase and do not retain it. If a website asks you to save your CVV for future purchases, that is a sign the site is not following payment security standards.
Why card numbers are different lengths
American Express cards have 15 digits instead of 16 because the company designed its numbering system differently from Visa and Mastercard. The first digit is still the network identifier (3 for Amex), but the remaining 14 digits are divided differently between the issuer identification and the account number.
Some specialty cards, corporate cards, or older cards may have 14 digits. This is less common now, but the Luhn algorithm still validates them the same way. The length does not affect how secure the card is or how it works — it is simply a different numbering scheme.
What you should and should not share
You should never share your full card number, expiration date, and CVV all together with anyone except during an authorized purchase with a merchant you trust. If someone asks for all three pieces of information outside of a purchase context, that is a fraud attempt.
It is safe to share your card number alone with a merchant during a purchase — that is what it is for. It is also safe to share your card number with your bank or card issuer when you call them directly. But never share your CVV with anyone, including your bank. Your bank already has your CVV on file and will never ask you for it.
If you see a charge on your statement that you did not make, contact your bank immediately. You are not responsible for unauthorized charges, but you must report them within the timeframe specified in your cardholder agreement — usually 60 days from when the statement is issued.
Frequently Asked Questions
Why do I need to memorize my card number if I have the physical card?
You do not need to memorize it. Most people keep their card with them or store the number securely in their phone or password manager. You only need to know it when you make a purchase without the physical card present — such as online shopping or a phone order — and you cannot look at the card itself.
Is it safe to take a photo of my credit card?
It is not recommended. If your phone is hacked or stolen, a photo of your card gives someone your full number and expiration date. They would still need your CVV to make online purchases, but they could use the number and expiration date for in-person fraud or to test whether the card is active. Store sensitive information in a password manager instead.
What happens if I give someone the wrong card number by mistake?
If the number you gave is not a valid card number (meaning it fails the Luhn algorithm check), the merchant's system will reject it immediately and the transaction will not go through. No charge will be made. If the number is valid but belongs to someone else's card, that person's bank will reject the transaction because the CVV will not match.
Do all the digits on my card appear on my statement?
No. Your monthly statement shows only the last four digits of your card number for security reasons. This is called the truncated number. It is enough to identify which card the charge was made on if you have multiple cards, but not enough for someone to use the card if they see your statement.
Can someone use my card number if they do not have the CVV?
They cannot complete an online or phone purchase without the CVV. However, they could potentially use the card number and expiration date for in-person fraud at a merchant that does not check the CVV, or they could test whether the card is active by attempting small charges. This is why you should report a lost or stolen card immediately, even if you still have the physical card.