The CVV is a three- or four-digit security code printed on your card that proves you physically have it
The CVV (Card Verification Value) is a short number on the back or front of your credit card that exists for one reason: to reduce fraud when you can't hand the card to someone in person. When you buy something online or over the phone, the merchant asks for this code to confirm you actually possess the physical card — not just the number.
Visa and Mastercard call it CVV2. American Express calls it CID. Discover calls it CID as well. They all work the same way. The code is not stored in the card's magnetic stripe or chip, which is why a thief who steals your card number alone cannot complete an online purchase without it.
This matters because your card number can leak from a data breach, be photographed, or be read from a receipt. The CVV cannot. It only exists on the physical card and in your bank's records — never in a merchant's database or on a receipt.
Key Takeaways
- The CVV is a three- or four-digit code on your card that proves you physically have it when shopping online or by phone.
- Visa and Mastercard print the CVV on the back of the card; American Express and Discover print it on the front.
- You should never share your CVV with anyone except the merchant you are actively paying, and legitimate companies will never ask for it by email or phone.
- A CVV alone cannot be used to make a purchase — a thief needs your card number, expiration date, and cardholder name as well.
Where the CVV appears on different card types
The location depends on which card network issued your card. Visa and Mastercard print the CVV on the back, in the signature panel on the right side. It is the last three digits of a longer number. American Express prints a four-digit code on the front, above the card number on the right. Discover also prints a three-digit code on the back, like Visa and Mastercard.
The front or back location matters when you are entering it online — you need to know where to look. But the security function is identical regardless of where it sits.
Why merchants ask for it during online and phone purchases
When you hand a card to a cashier in a store, they can see your face and verify the signature on the back. They can also run the card through a reader that checks the chip or magnetic stripe. Online and phone merchants cannot do any of that. They have only your card number and expiration date, both of which can be compromised without your knowledge.
The CVV is a quick way to confirm you have the physical card in your hand right now. If you are making a purchase and the merchant does not ask for it, that is a red flag — it suggests they are not taking basic security steps.
What a thief cannot do with just your CVV
The CVV alone is useless. A criminal needs four pieces of information to make an online purchase: your card number, expiration date, cardholder name, and CVV. If someone obtains only your CVV, they cannot spend money. This is why you can safely write your CVV on a receipt or say it out loud in a store — the number means nothing without the other three pieces.
This also means you should never store your CVV anywhere — not in your phone, not in a password manager, not in an email. You should memorize it or look at the card itself each time you need it. If your card is lost or stolen, the thief has the number, expiration date, and name already, so the CVV becomes a real risk.
How to protect your CVV from being stolen
Never share your CVV with anyone except a merchant you are actively paying. Legitimate companies — your bank, the credit card company, a store — will never ask for your CVV by email, text, or phone call. If someone contacts you claiming to verify your card and asks for this code, hang up or delete the message. It is a scam.
When you shop online, make sure the website is secure. Look for "https://" at the start of the web address and a padlock icon in the browser. These indicate the connection is encrypted, so your CVV is not being transmitted in plain text. Avoid entering your CVV on public Wi-Fi networks, especially at coffee shops or airports, where someone nearby could intercept the data.
If you believe your CVV has been compromised — for example, you gave it to a fraudulent website — contact your bank or card issuer immediately. They can cancel the card and issue a new one with a different CVV. The old code will no longer work.
What happens if your card is lost or stolen
If your physical card goes missing, the thief has your card number, expiration date, name, and CVV. This is why you should report a lost or stolen card to your bank or card issuer as soon as you notice it is gone. They will cancel the card and issue a replacement with a new number and new CVV.
Most card issuers offer fraud protection, meaning you are not responsible for unauthorized charges made after you report the card missing. However, charges made before you report it may be your responsibility depending on your card's terms and your state's laws. The faster you report it, the smaller the window for fraud.
Frequently Asked Questions
Can someone use my card number and expiration date without the CVV?
In person, yes — a cashier can run a card through a reader without asking for the CVV. Online or by phone, most merchants will decline the transaction if the CVV does not match or is missing. Some older or less secure websites may accept it, but this is rare and a sign of poor security practices.
Is it safe to save my CVV to a website for faster checkout?
No. Reputable websites do not store CVVs — they are designed to accept it only during the transaction and then discard it. If a website offers to save your CVV, that is a warning sign. Stick to entering it fresh each time, or use a digital wallet like Apple Pay or Google Pay, which does not transmit your CVV to the merchant at all.
What should I do if I accidentally shared my CVV with a suspicious website?
Contact your bank or card issuer right away and describe what happened. They can monitor your account for fraud and may cancel the card and issue a new one as a precaution. Do not wait to see if charges appear — report it immediately so they can act quickly.
Why does American Express print the CVV on the front instead of the back?
American Express designed their cards this way decades ago, before online shopping was common. The front placement was meant to make the code harder to read from a distance or in a photograph. It is simply a different design choice with no real security advantage over back placement.