Your CVV is a three- or four-digit security code printed on your card that proves you physically hold it

The CVV (Card Verification Value) is a short number on the back of your credit card — usually three digits, or four if you have an American Express. It sits near your signature line. Merchants ask for it during online or phone purchases because it's something only someone holding the physical card would know. It's not encoded in the card's magnetic stripe or chip, so a thief who steals your card number alone cannot use it online without also having the card itself.

The CVV exists to reduce fraud on transactions where the merchant cannot see your card in person. When you swipe or insert your card at a store, the cashier can verify you're the cardholder. Online, they cannot. The CVV bridges that gap — it's a quick way to confirm you have the card without requiring you to mail it in or meet face-to-face.

Different card networks call it by different names: Visa and Discover call it CVV2, Mastercard calls it CVC2, and American Express calls it CID. The function is the same across all of them.

Key Takeaways

  • Your CVV is a three- or four-digit code printed on your card (back for Visa and Mastercard, front for American Express) that proves you physically hold the card.
  • Merchants use the CVV to verify you have the card during online and phone purchases, since they cannot see it in person.
  • Never share your CVV with anyone who calls you or emails you unsolicited — legitimate companies will not ask for it that way.
  • The CVV is different from your card number and expiration date; losing one does not automatically compromise the others.

Where to find your CVV on your card

For Visa, Mastercard, and Discover cards, the CVV is printed on the back of the card, to the right of the signature strip. It's the last three digits of a longer number that appears there. You do not need to enter the entire longer number — only the three-digit CVV itself.

For American Express, the CVV is on the front of the card, above the card number on the right side. It is four digits instead of three.

If your card is damaged or the CVV has worn away, contact your card issuer and request a replacement card. They will send you a new one with a fresh CVV printed on it.

When merchants ask for your CVV and when they should not

You should enter your CVV during online checkout at legitimate retailers, when paying over the phone with a business you initiated contact with, and sometimes when setting up automatic payments or subscriptions. These are normal, expected moments.

You should never give your CVV to someone who called you unsolicited, emailed you asking for it, or texted you requesting it. Your bank, credit card company, and legitimate merchants will not ask for your CVV through email, text, or unsolicited phone calls. If someone contacts you this way asking for card details, it is a scam. Hang up, do not reply, and report the message to your card issuer.

Do not write your CVV on receipts, store it in your phone or email, or give it to anyone in person unless you are handing them your physical card to process a payment. The CVV's entire purpose is to stay private — it should only be known to you and the merchant processing that specific transaction.

Why the CVV does not protect you from all fraud

The CVV reduces one type of fraud: someone using your card number without having the card. But it does not protect you if your physical card is stolen, because a thief holding the card can read the CVV themselves. It also does not protect you if your card information is breached in a data hack — the CVV is sometimes stored in those breaches too, though responsible merchants do not store it.

The CVV is one layer of security, not a complete shield. Your other protections are your card issuer's fraud monitoring (which watches for unusual purchases), your right to dispute unauthorized charges, and your own vigilance about where you share your card details.

What happens if someone gets your CVV

If someone obtains your CVV along with your card number and expiration date, they can make online purchases in your name. However, they cannot use your card at a physical store without the card itself — the CVV is only needed for remote transactions.

If you believe your CVV has been compromised, contact your card issuer immediately. They can cancel your card and issue a replacement with a new CVV. Do not wait. The sooner you report it, the sooner they can watch for fraudulent charges and the sooner you get a new card.

Check your account statements regularly for purchases you did not make. Most card issuers allow you to dispute unauthorized charges, and federal law limits your liability — often to zero if you report it quickly. The key is catching it early.

CVV versus other card security features

Your CVV is separate from your card number, expiration date, and PIN. Losing one does not automatically compromise the others. A merchant processing an online purchase needs your card number, expiration date, and CVV. A cashier at a store does not need your CVV at all — they only need to see the card or process the chip. An ATM or in-person debit transaction uses your PIN, not your CVV.

Some cards also have a chip (EMV chip) that generates a unique code for each transaction, making it harder to clone the card. The chip and CVV work together but serve different purposes. The chip protects in-person transactions; the CVV protects remote ones.

Frequently Asked Questions

Can I use my card online without giving the CVV?

Most online retailers require it, but some may not ask if they use other verification methods like 3D Secure (a system that redirects you to your bank to confirm the purchase). If a site does not ask for your CVV and you trust it, you can proceed. However, reputable retailers typically request it as standard practice.

Is it safe to save my CVV for future purchases?

No. Do not save your CVV in your browser, phone, or email. Legitimate retailers do not store it after a transaction — they only use it to verify that single purchase. If you save it, you increase the risk that a hacker or malware could steal it.

What if I forgot my CVV?

Look at the back of your physical card. If the number has worn away or you do not have the card with you, contact your card issuer. They can tell you the CVV over the phone after verifying your identity, though some issuers prefer you to enter it yourself by logging into your online account.

Do I need to memorize my CVV?

You do not need to memorize it. Keep your card secure and look at it when you need the CVV. Memorizing it offers no real security benefit and creates unnecessary risk if someone overhears you or sees you write it down.

Can someone use my card if they only have the CVV?

Not easily. They would also need your card number and expiration date to make an online purchase. If they have all three, they can attempt fraud. If they only have the CVV, it is useless to them without the other details.