The CVV is the three- or four-digit security code on the back of your card

The CVV (Card Verification Value) is a short number printed on your credit card that proves you physically have the card in your hand. It sits on the back of most cards as a three-digit code. American Express cards print a four-digit CVV on the front instead.

The CVV is not the same as your card number. It is not stored in the card's magnetic stripe or chip, and merchants cannot see it when you swipe or insert your card in person. You only need to provide it when you pay online, over the phone, or through mail order — situations where the merchant cannot read your card directly.

Card networks like Visa, Mastercard, and Discover use the CVV as a basic fraud check. When you enter it during an online purchase, the payment processor verifies that the number matches what the card issuer has on file. If it does not match, the transaction is declined. This does not make your card completely safe, but it does catch some fraudulent charges from people who have only your card number.

Key Takeaways

  • The CVV is a three-digit code on the back of Visa, Mastercard, and Discover cards, or a four-digit code on the front of American Express cards.
  • You need the CVV only for online, phone, and mail purchases — not for in-person transactions where you insert or swipe your card.
  • Never share your CVV with anyone who calls you or emails you unsolicited, because legitimate companies will not ask for it that way.
  • The CVV is not your PIN, your expiration date, or your card number — each serves a different purpose.

Where to locate your CVV on different card types

On Visa, Mastercard, and Discover cards, flip the card over and look at the back. The CVV appears as three digits in or near the signature strip — the white or gray area where you sign your name. It is usually printed to the right of the signature line.

On American Express cards, the CVV is four digits and appears on the front of the card, above the card number on the right side. This placement is different from other card networks, so check the front first if you are using an Amex card.

If you cannot find the CVV on a physical card, you can also view it in your online account. Log into your card issuer's website or mobile app, navigate to your card details or account settings, and the CVV should appear there. Some issuers display it only after you confirm your identity with a password or security question.

When you need to enter your CVV and when you do not

You need your CVV for online purchases on websites, mobile apps, and phone orders. Any time you are paying without the merchant being able to read your card directly, they will ask for the CVV as part of the payment form.

You do not need your CVV for in-person purchases at a store, gas station, or restaurant. When you insert your chip card or swipe your magnetic stripe, the card reader communicates directly with your card and the payment network — no CVV required. If a cashier or server asks for your CVV in person, that is unusual and you should decline.

You also do not need your CVV to set up automatic payments with a company you already do business with, like your utility provider or insurance company. Once they have your card on file, they can charge you without the CVV. However, the first time you give them your card information, you may need to provide it.

How to protect your CVV from fraud

Never write your CVV on your card, take a photo of it, or store it in an email or text message. The CVV is meant to be temporary information you look up only when you need it. If someone gains access to your CVV, they can make online purchases without having your physical card.

Do not share your CVV over the phone unless you initiated the call to a company you trust. Scammers often call pretending to be from your bank or a retailer and ask for your CVV to "verify your account" or "confirm a purchase." Legitimate companies will never call you and ask for this information. If you are unsure, hang up and call the company directly using the number on your card or their official website.

Be cautious on public Wi-Fi networks when entering your CVV online. Use only secure websites that begin with "https://" and show a padlock icon in the address bar. If you are shopping on a public network, consider waiting until you are on a private network, or use your phone's cellular data instead of Wi-Fi.

CVV versus other card security features

The CVV is one of several pieces of information on your card, and each one serves a different purpose. Your card number is the 16-digit (or sometimes 15-digit) code that identifies your account. Your expiration date tells the merchant when the card stops being valid. Your cardholder name is printed on the front. Together, these are the minimum details needed for most online purchases.

Your PIN (Personal Identification Number) is different from your CVV. The PIN is a four-digit code you create and use at ATMs and sometimes at point-of-sale terminals in stores. Only you should know your PIN, and you should never write it down or share it. The CVV, by contrast, is printed on the card itself and is meant to be used for remote purchases.

Newer security features like 3D Secure (also called Verified by Visa, Mastercard SecureCode, or Discover ProtectBuy) add an extra layer beyond the CVV. When you use 3D Secure, you are redirected to your bank's website during checkout to confirm the purchase with a password or one-time code. This is more secure than the CVV alone because it proves you are the cardholder, not just someone who has your card number and CVV.

What to do if your CVV is compromised

If you believe someone has your CVV, contact your card issuer right away. Call the number on the back of your card or log into your online account and use the fraud reporting option. Your issuer can cancel your current card and send you a new one with a different CVV.

You do not need to wait for fraudulent charges to appear before reporting a compromised CVV. If you accidentally shared it with someone suspicious, or if you saw it displayed on a website that did not look secure, report it immediately. The sooner you act, the sooner your issuer can issue a replacement card.

Check your account statements regularly for charges you do not recognize. Most card issuers allow you to dispute fraudulent charges within a certain time frame — usually 60 days from when the charge appears on your statement. If you spot something wrong, report it to your issuer in writing as well as by phone, so there is a record of your dispute.

Frequently Asked Questions

Is the CVV the same as my card number?

No. Your card number is the 16-digit code that identifies your account. The CVV is a separate three- or four-digit security code. You need both for most online purchases, but they serve different purposes.

Can someone use my card online if they only have my CVV?

They would also need your card number and expiration date. However, if they have all three pieces of information, they can make online purchases without your permission. This is why you should never share your CVV with anyone you do not trust.

Why does American Express put the CVV on the front instead of the back?

American Express designed its cards differently from Visa and Mastercard. The four-digit CVV on the front of an Amex card serves the same purpose as the three-digit code on the back of other cards — it is a security feature for remote purchases.

Do I need my CVV to use my card at an ATM?

No. At an ATM, you use your PIN, not your CVV. The CVV is only for purchases and payments where you cannot insert or swipe your card in person.

What should I do if I forgot my CVV?

Look at the back (or front for Amex) of your physical card. If you do not have the card with you, log into your card issuer's website or app — most issuers display the CVV in your account details after you sign in.