CID stands for "Card Identification Data," but it's not a type of credit card — it's a security feature that appears on every credit card you own

When you hear "CID credit card," someone is usually referring to the Card Identification Data printed or embossed on your card. This is the three- or four-digit security code on the back of your card (or front, depending on the issuer). Visa, Mastercard, and Discover call it the CVV or CVV2. American Express calls it the CID or CVC. It's the same thing: a number designed to prove you physically have the card when you're making an online or phone purchase.

The CID is not a separate product or card type. It's a security layer built into the card itself. Understanding what it is and how to protect it matters because fraudsters actively hunt for this number — and if someone gets it, they can make purchases in your name without ever holding your physical card.

Key Takeaways

  • CID is the three- or four-digit security code on your credit card, also called CVV or CVV2 depending on the card brand.
  • The CID proves you physically have the card when you make online or phone purchases, adding a layer of fraud protection.
  • Never share your CID with anyone except the merchant you're paying directly — legitimate companies never ask for it via email or phone.
  • Your CID is different from your card number and expiration date, and thieves who have those two pieces of information still cannot complete most online purchases without it.

Where the CID appears on your card

On Visa, Mastercard, and Discover cards, the CID is a three-digit number printed on the back of the card, to the right of the signature strip. On American Express cards, it's a four-digit number printed on the front, above the card number on the right side. The location matters because it tells you whether a merchant is asking for the real thing or fishing for information.

The CID is not embossed like your card number — it's printed flat on the surface. This is intentional. Because it's printed rather than raised, it doesn't transfer to paper receipts or carbon copies the way your card number does. That design choice makes it harder for someone handling your physical card to capture the number.

Why merchants ask for the CID

When you buy something online or over the phone, the merchant cannot swipe or insert your card into a reader. They have your card number and expiration date, but they don't have proof that you're the person holding the physical card. The CID closes that gap. If you can recite the three or four digits on your card, you probably own it.

This is why legitimate merchants always ask for the CID during online checkout or phone orders. It's a basic fraud check. A thief who stole your card number from a data breach or phishing email might have the number and expiration date, but they won't have the CID unless they also have the physical card or a photo of it.

How to protect your CID

Treat your CID the same way you treat your card number: never share it with anyone except the merchant you're paying directly. Never type it into an email, text message, or link someone sends you. Never read it aloud to someone who called you claiming to be from your bank or credit card company — legitimate financial institutions already have this information and will never ask you to provide it.

If you're shopping online, only enter your CID on a secure checkout page (look for "https://" in the address bar and a padlock icon). If you're on a public Wi-Fi network, avoid entering it altogether — use your phone's cellular data or wait until you're on a private network. When you receive your physical card, memorize the CID if you can, then consider covering it with a sticker or tape so it's not visible if someone photographs your card.

If you believe your CID has been compromised — for example, you used it on a website that was later hacked — contact your card issuer immediately. They can issue you a new card with a new CID. The old number becomes useless once your new card arrives.

CID versus other card security features

Your CID is one layer of fraud protection, but it's not the only one. Your card also has a card number (16 digits for most cards), an expiration date, and your name. Together, these are the pieces a merchant needs to process a payment. But they're not equally important for security.

Your card number is the most sensitive piece of information on the card. If someone has only your card number, they can't complete most online purchases without the expiration date and CID. If they have the card number and expiration date, they still can't complete most online purchases without the CID. The CID is the final checkpoint. Your name, by contrast, is public information — it's printed on your card and visible to anyone who sees it, so it's not a security secret.

Newer cards also include EMV chips (the small metallic square on the front). These chips create a unique code for each transaction, making it much harder for thieves to use a stolen card number in a physical store. But the chip doesn't help with online or phone purchases, which is why the CID still matters.

What to do if someone asks for your CID in a suspicious way

If a merchant asks for your CID during a phone call, that's normal — they have no other way to verify you have the card. But if someone claiming to be from your bank, the IRS, a utility company, or a retailer calls you and asks for your CID, hang up. Legitimate organizations already have this information if they need it, and they have other ways to verify your identity.

The same rule applies to emails and text messages. If you receive an email asking you to "verify your card information" by clicking a link and entering your CID, it's a phishing attempt. Delete it. If you're unsure whether a request is legitimate, hang up or close the email, then call the organization directly using the phone number on your bill or their official website. Never use a phone number or link from the suspicious message.

Frequently Asked Questions

Is my CID the same as my PIN?

No. Your CID is the three- or four-digit security code on your card used for online and phone purchases. Your PIN is a separate four-digit code you create and use at ATMs and in-store chip readers. They're different numbers with different purposes. Never share either one.

Can someone use my card if they have my card number, expiration date, and CID?

Yes, they can make online and phone purchases. That's why you should never share all three pieces of information with anyone. For legitimate online shopping, you enter all three on a secure checkout page. For phone orders, you read them to a merchant you called yourself. Never provide them all to someone who contacted you.

What if I can't remember my CID?

Look at the back of your physical card (or front if it's American Express). The CID is printed there. If you don't have your card with you, contact your card issuer — they can read it to you over the phone after they verify your identity. Never ask someone else to read it to you or share it via email.

Does my CID change if I get a new card?

Yes. Each time your card issuer sends you a new card — whether because yours expired, was damaged, or was compromised — the new card has a new CID. The old CID stops working once the new card is activated. This is one reason why merchants can't store your CID for future purchases the way they can store your card number.

Can I use my credit card online without entering the CID?

Some merchants allow it, but most require it. Merchants who skip the CID requirement are taking on more fraud risk. If you're shopping at a major retailer or bank, they almost certainly require it. If a checkout page doesn't ask for your CID, that's unusual — double-check that you're on the real website and not a phishing copy.