The CVV is a three- or four-digit security code printed on the back of your card

The CVV (Card Verification Value) is a short number that proves you physically have the card in your hand. It lives on the back of your card, separate from your card number, and you'll need it whenever you buy something online or over the phone.

For most cards — Visa, Mastercard, and Discover — the CVV is three digits printed on the back, usually to the right of the signature strip. American Express is different: the four-digit code sits on the front, above your card number on the right side.

The CVV is not stored in the magnetic stripe or chip on your card. It's printed only on the physical card itself, which is why merchants ask for it when they can't swipe or insert your card in person.

Key Takeaways

  • Visa, Mastercard, and Discover cards have a three-digit CVV on the back, to the right of the signature strip.
  • American Express cards have a four-digit code on the front, printed above the card number on the right side.
  • Never share your CVV in an email, text, or over the phone unless you initiated the transaction and trust the merchant.
  • The CVV is printed only on the card itself and is not stored in the chip or magnetic stripe, which is what makes it a security tool.

Why merchants ask for the CVV

The CVV serves one purpose: to confirm that the person making the purchase has the physical card. When you shop online or call a merchant, they can't see or swipe your card, so they ask for the CVV as proof you're not using a stolen card number.

Because the CVV is printed on the card and not encoded anywhere else, a thief who only has your card number — say, from a data breach — cannot complete an online purchase without it. This is why the CVV is sometimes called a "security code" or "verification code."

Merchants are not supposed to store your CVV after the transaction. If a company asks you to save your CVV for future purchases, that's a red flag — legitimate businesses delete it immediately.

How to spot your CVV quickly

Turn your card over. On the back, you'll see a white or light-colored strip where you sign your name. To the right of that strip, you'll find three digits printed in the card's color (not white). That's your CVV.

If you have an American Express card, flip it to the front. Look above your card number on the right side — you'll see four digits printed there. That's your CVV.

The CVV is never in the same color as the card number or the expiration date. It's usually printed in a contrasting color so it stands out.

When you should and shouldn't give out your CVV

Do give your CVV when you're making a purchase online at a website you trust, or when you call a merchant directly to place an order. You should also provide it if you're setting up a recurring payment (like a subscription) with a company you know.

Never give your CVV in an email, text message, or chat — legitimate companies will never ask for it that way. Don't share it over the phone unless you called the merchant first. If someone calls you claiming to be from your bank or a store and asks for your CVV, hang up and call the organization directly using a number from your statement or their official website.

Be cautious if a merchant wants to store your CVV for future purchases. Most reputable companies use a process called "tokenization" instead, which lets them charge your card without keeping the CVV on file.

What happens if someone gets your CVV

If a thief has your CVV but not your card, they can attempt online purchases, but they still need your card number and expiration date. If they have all three pieces of information, they can make unauthorized charges.

If you notice charges you didn't make, contact your card issuer right away. Federal law limits your liability for unauthorized charges to $50, and most card companies waive that fee entirely if you report the fraud promptly. The sooner you call, the faster they can freeze the card and investigate.

You don't need to worry if your CVV was exposed in a data breach but your physical card is still safe. The CVV is printed on the card itself and is not typically stored in merchant databases or payment networks, so breaches usually don't compromise it.

CVV versus other card security features

Your card has several security layers. The card number (16 digits for Visa and Mastercard, 15 for American Express) identifies your account. The expiration date tells you when the card stops working. The CVV proves you have the physical card. Together, these three pieces are what merchants ask for online.

Your card also has a chip (the small metallic square) and a magnetic stripe (the black strip on the back). These store encrypted account information and are used when you insert or swipe your card in person. They do not contain your CVV.

Your PIN (Personal Identification Number) is separate from all of these. You create your PIN when you get your card, and you use it at ATMs and in-person at stores that require it. Merchants never ask for your PIN online.

Frequently Asked Questions

Is the CVV the same as the security code?

Yes. CVV, CVC, CVV2, and "security code" all refer to the same three- or four-digit number on your card. Different card companies use different names — Visa calls it CVV2, Mastercard calls it CVC — but they work the same way.

Can I use my card online without giving the CVV?

Most online merchants require it, but some don't — especially if you've saved your card with them before or if you're using a digital wallet like Apple Pay or Google Pay. Digital wallets don't transmit your CVV to the merchant, which is one reason they're considered safer for online shopping.

What if I can't read my CVV because it's worn off?

Contact your card issuer and ask for a replacement card. They'll send you a new one with a fresh CVV printed on it. In the meantime, you may not be able to make online purchases, but you can still use the card in person.

Does the CVV change?

No. Your CVV stays the same for the life of the card. It only changes when you get a new card — either because yours expired, was damaged, or was replaced due to fraud.

Why does American Express put the CVV on the front?

American Express designed their cards differently from Visa and Mastercard. The four-digit code on the front serves the same purpose as the three-digit code on the back of other cards — it proves you have the physical card when you can't swipe or insert it.