A standard credit card has 16 digits, though some cards have 15

Most credit cards you'll see have 16 numbers printed on the front. American Express cards are the main exception — they have 15 digits. These numbers aren't random. Each one serves a specific purpose, and understanding what they do helps you spot fraud, fill out online forms correctly, and know which part of your card number is actually sensitive.

The digits break into four groups of four (on Visa and Mastercard) or three groups on American Express. You'll see them printed in raised bumps or flat print, depending on the card. The number itself is called your Primary Account Number, or PAN.

Key Takeaways

  • Visa and Mastercard have 16 digits; American Express has 15 digits.
  • The first digit identifies the card network (4 for Visa, 5 for Mastercard, 3 for American Express).
  • Digits 2 through 6 identify your bank and the type of card you have.
  • The last digit is a check digit that catches typos and fraud attempts.
  • You should never share your full card number online unless you're making a purchase from a trusted merchant.

The first digit tells you which network issued the card

The very first number on your card is called the Major Industry Identifier, or MII. It narrows down which payment network your card belongs to. A card starting with 4 is a Visa. A card starting with 5 is a Mastercard. American Express cards start with 3 (specifically 34 or 37).

This matters because different networks have different rules about fraud protection, dispute processes, and which merchants accept them. It's also why you can sometimes tell what card someone has just by looking at the first digit — the payment network is baked into the number itself.

Digits 2 through 6 identify your specific bank and card product

The next five digits (positions 2 through 6) are called the Issuer Identification Number, or IIN. These five digits tell the payment network which bank issued your card and what type of card it is. A Chase Sapphire Preferred card will have a different IIN than a Chase Freedom card, even though both are Visa cards issued by Chase.

When you swipe or insert your card at a store, the payment terminal reads these digits to route the transaction to the right bank. If you call your bank's customer service number on the back of your card, they use the IIN to pull up your account instantly. You don't need to memorize this part — it's there so machines can identify you.

Digits 7 through 15 are your unique account number

The middle section of your card number (digits 7 through 15 on a 16-digit card) is your account number. This is the part that's truly unique to you. No two cardholders at the same bank will have the same account number, even if they have the same card product.

This is the part of your number that matters most for your privacy. If someone has your account number, they can attempt to use your card. The first six digits (the IIN) are semi-public — they're printed on receipts and visible to merchants. But your account number should stay private.

The last digit is a check digit that catches errors

The final digit on your card is called the check digit. It's calculated using a mathematical formula called the Luhn algorithm, which uses all the other digits to generate this last number. The purpose is to catch typos and fraud attempts.

When you enter your card number online or over the phone, the payment system runs the Luhn check automatically. If someone types in a fake card number with a wrong check digit, the system rejects it immediately — before it even tries to charge anything. This is why you can't just guess a valid card number; the check digit has to match the formula.

Why the number is longer than you might think

You might wonder why card networks didn't just use fewer digits. The answer is that they need enough numbers to give every cardholder a unique account number while also encoding information about the bank and card type. With 16 digits, Visa can issue billions of unique cards without running out of numbers.

The length also matters for security. A longer number is harder to guess by accident. And the structure — with the IIN at the front and the check digit at the end — makes it possible for payment systems to validate and route transactions instantly, without having to look up every single card in a database.

What you should and shouldn't share

You should never share your full 16-digit card number with anyone except a merchant you trust during a legitimate purchase. This includes not texting it, emailing it, or reading it to someone who calls you claiming to be from your bank.

Your bank will never ask you for your full card number over the phone or email. If someone contacts you asking for it, hang up or delete the message. Legitimate customer service representatives already have access to your account and can identify you through other means — usually your Social Security number or date of birth.

The CVV (the three-digit security code on the back) is even more sensitive than the card number itself. Never share that with anyone, and never enter it on a website that doesn't have a secure checkout page (look for the padlock icon in your browser).

Frequently Asked Questions

Why do some cards have 15 digits and others have 16?

American Express uses a 15-digit format because they designed their system differently than Visa and Mastercard. Both formats work fine; it's just a choice the card network made decades ago. The first digit still identifies the network, and the last digit is still a check digit — the middle section is just shorter.

Can someone use my card if they only know the first six digits?

No. The first six digits (the IIN) are semi-public information — they appear on receipts and are visible to merchants. But without your account number (digits 7–15) and the check digit, someone cannot process a transaction. They would need at least the full 16-digit number, plus the expiration date and CVV, to attempt a charge.

Does the card number change if I get a replacement card?

Usually yes. If your bank sends you a replacement card because yours was lost, stolen, or expired, the new card will have a different account number. This is a security feature — it makes the old number useless if it was compromised. The IIN (first six digits) will likely stay the same because it identifies your bank and card product, not the individual card.

What happens if I type my card number wrong when making a purchase?

The payment system will reject it before charging you anything. The Luhn check digit catches most typos automatically. If you somehow enter a number that passes the check digit but is still wrong, the charge will fail when the payment network tries to route it to the correct bank.

Is it safe to save my card number on websites I use often?

It depends on the website's security. Major retailers like Amazon and Apple use encryption and security standards that make saved cards reasonably safe. Smaller or less-known websites are riskier. If you're unsure about a site's security, don't save your card — enter it fresh each time. You can always check whether a site is secure by looking for the padlock icon in your browser's address bar.