The CVV is a three- or four-digit security code printed on the back of your card
The CVV (Card Verification Value) is a three-digit number on the back of most credit cards, located to the right of the signature strip. American Express cards print a four-digit CVV on the front, above the card number on the right side. This code exists so that online and phone merchants can verify you have physical possession of the card — they see the number you type, but never store it in their system the way they store your card number.
The CVV is not embossed or raised like your card number. It is printed flat against the card surface, usually in a small box. The exact position varies slightly by card issuer, but the back placement is standard for Visa, Mastercard, and Discover.
You should never write down your CVV, photograph it, or share it with anyone except a merchant you are actively paying. Unlike your card number, which appears on receipts and statements, the CVV should remain known only to you and the card issuer.
Key Takeaways
- Visa, Mastercard, and Discover cards have a three-digit CVV on the back, to the right of the signature strip.
- American Express cards have a four-digit CVV printed on the front, above the card number on the right side.
- The CVV is printed flat, not raised, and sits in a small box or area separate from other numbers.
- You should only enter your CVV when making a purchase with a merchant you trust, and never store or share it.
Why merchants ask for the CVV
When you buy something online or over the phone, the merchant cannot swipe or insert your card into a reader. They have no way to physically verify the card is real or that you are holding it. The CVV closes that gap: if you can read and recite a number that is printed on the card itself, you likely have the card in your hand.
The merchant sends your CVV to the card network (Visa, Mastercard, or Discover) or the card issuer, who checks whether it matches their records. If it does, the transaction is approved. If it does not, the transaction is declined. The merchant never stores the CVV — they are not allowed to by law. Once the transaction is approved or declined, the number is discarded.
This is why a thief who has only your card number and expiration date cannot easily make an online purchase: they do not have the CVV. It is also why you should never type your CVV into a website that looks suspicious or that you did not navigate to yourself.
How to locate the CVV on different card types
| Card Type | CVV Length | Location |
|---|---|---|
| Visa | 3 digits | Back, right side of signature strip |
| Mastercard | 3 digits | Back, right side of signature strip |
| Discover | 3 digits | Back, right side of signature strip |
| American Express | 4 digits | Front, above card number on right side |
On Visa, Mastercard, and Discover cards, flip the card over and look at the back. The signature strip runs horizontally across the lower portion. To the right of that strip, you will see a small box or area containing three digits. That is your CVV. The number may be printed in black or dark ink, and it sits separate from the card number and other information.
On American Express cards, turn the card face-up. Look at the front, on the right side above the raised card number. You will see four digits printed there. This is the American Express CVV, sometimes called the CID (Card Identification Number). The position is more prominent than on other cards because American Express designed the system differently.
What to do if your CVV is worn or unreadable
If the CVV on your card has faded, worn away, or become illegible from wear or damage, contact your card issuer directly. You can call the number on the back of your card or log into your online account. The issuer can tell you your CVV over the phone after they verify your identity — usually by asking for your full card number, date of birth, or other personal information.
Do not ask the issuer to read the CVV to you and then write it down for future use. The CVV is meant to be read fresh each time you need it, not stored. If you need to make a purchase and cannot read your CVV, call the merchant's customer service line and explain the situation. Many merchants have alternative ways to process a payment for a customer with a damaged card.
If your card is damaged enough that the CVV is unreadable, it may also be time to request a replacement card from your issuer. A new card will have a fresh, legible CVV and will not carry the wear of the old one.
CVV and fraud protection
The CVV is one layer of fraud protection, but not the only one. Card networks and issuers also use address verification (checking that the billing address you enter matches their records), transaction monitoring (flagging unusual spending patterns), and encryption (scrambling your data so it cannot be read if intercepted).
Because the CVV is printed on the card and not stored in the magnetic stripe or chip, a thief who steals your card number from a data breach cannot use it to make online purchases without also having the physical card or knowing the CVV. This is why data breaches of card numbers alone are less immediately dangerous than breaches that include CVVs — though breaches of CVVs are rarer because merchants are not supposed to store them.
If you notice a charge on your statement that you did not make, contact your card issuer immediately. You are not responsible for fraudulent charges, but the sooner you report them, the sooner the issuer can investigate and issue you a new card.
When you should and should not enter your CVV
Enter your CVV when you are making a purchase with a merchant you trust and you initiated the transaction yourself. This includes online shopping at established retailers, paying bills through your bank's website, or making a phone purchase with a company you have done business with before. In these situations, the merchant is asking for the CVV as a security measure to confirm you have the card.
Do not enter your CVV if someone calls you and asks for it, even if they claim to be from your bank or card issuer. Your bank will never call you and ask for your CVV. Do not enter it on a website you reached by clicking a link in an email or text message — navigate to the website directly by typing the address yourself. Do not enter it on a website that does not have a secure connection (look for the padlock icon in the address bar and a URL that starts with "https").
If a merchant's website asks for your CVV in an unusual way — such as in a pop-up window or on a page that looks different from the rest of the site — stop and contact the merchant directly through their main website or phone number to confirm the request is legitimate.
Frequently Asked Questions
Can someone use my card number without the CVV?
Yes, but with limitations. A thief with only your card number and expiration date can make in-person purchases at a physical store by swiping or inserting the card. They cannot easily make online or phone purchases because most merchants require the CVV. If your card is lost or stolen, contact your issuer immediately to freeze or cancel it.
Is the CVV the same as the security code?
Yes. CVV, CVC, CID, and security code all refer to the same three- or four-digit number on your card. Different card networks use different names — Visa calls it CVV, Mastercard calls it CVC, American Express calls it CID — but they serve the same purpose.
Why is the CVV printed on the card if it is supposed to be secret?
The CVV is printed on the card so that you can read it when you need it for an online or phone purchase. The assumption is that only you have physical access to your card. The security comes from the fact that merchants cannot store the CVV, so even if a merchant's database is hacked, the CVV is not there to steal.
What if I entered my CVV on a website that looked fake?
Contact your card issuer immediately and report the incident. Provide them with the website address and the date and time you entered the information. The issuer can monitor your account for fraudulent activity and issue you a new card with a new CVV if needed. Do not wait to see if charges appear — report it right away.
Do I need to memorize my CVV?
No. You should have your physical card in front of you whenever you enter the CVV. Never memorize it or write it down. The only time you should know your CVV is when you are actively looking at the back of your card to read it for a purchase.