What credit card details are and where to find them
Your credit card details are the numbers, names, and codes printed or embedded on your card and linked to your account. They identify you to merchants, your bank, and payment networks. You need to know where each piece sits on your card and what it does, because you'll enter them differently depending on whether you're paying online, over the phone, or in person.
The front of your card holds the most visible information. The card number — usually 16 digits for Visa and Mastercard, sometimes 15 for American Express — is the long string across the middle or bottom. Below it sits your cardholder name, exactly as it appears on your account. To the right of the name you'll see the expiration date, written as two digits for the month and two for the year (for example, 05/27 means May 2027).
The back of your card holds the CVV or CVC — a three- or four-digit security code. For Visa, Mastercard, and Discover, it's a three-digit number on the back right. American Express prints a four-digit code on the front, above the card number on the right side. This code is not stored in the magnetic stripe or chip, so online merchants ask for it to verify you physically have the card.
Key Takeaways
- Your card number, expiration date, and CVV are the three pieces merchants need to process a payment, and each one serves a specific security purpose.
- The CVV is printed on the card but not encoded in the chip or stripe, so it proves you have the physical card when you pay online or by phone.
- Never share your full card details with anyone who contacts you unsolicited, and never type them into a link sent by email or text.
- Your card issuer and the payment network (Visa, Mastercard, Discover, or American Express) use your details to route the transaction and protect you from fraud.
Card number: what it identifies and how it's structured
The card number is a unique identifier for your specific card account. The first digit or two identify the payment network — Visa cards start with 4, Mastercard with 5, Discover with 6, and American Express with 3. The next digits identify your bank or card issuer. The remaining digits are your individual account number within that issuer's system.
The last digit is a check digit, calculated using the Luhn algorithm. Payment processors use this digit to catch typos before they send a transaction to your bank. If you mistype even one number, the check digit won't match and the payment will be rejected at the merchant's terminal, not sent to your bank.
Your card number changes if you request a replacement card, if your card is compromised, or if your issuer reissues your account. The new card will have a different number even though it's tied to the same account. Your bank will notify you of the new number and may automatically update recurring payments, but you should check any subscriptions or stored payment methods to make sure they're using the current card number.
Expiration date: why it matters and what happens when it passes
The expiration date tells merchants and payment networks when your card stops being valid. It's printed as month and year — for example, 12/26 means your card expires at the end of December 2026. After that date, the card cannot be used for any transaction, online or in person.
The expiration date exists for security and logistics. Cards wear out, magnetic stripes fade, and chips can fail. An expiration date forces periodic replacement, which gives your bank a chance to reissue a new card with updated security features and catch fraud patterns tied to the old card number. It also limits the window of time a stolen card can be used.
Your bank will typically mail a replacement card 7 to 14 days before your current card expires. You can start using the new card as soon as it arrives, even if your old card hasn't expired yet. If you don't receive a replacement card within two weeks of expiration, contact your bank's customer service line — the number is on your statement or the back of your card. Do not use an expired card; transactions will be declined.
CVV and why merchants ask for it online
The CVV (Card Verification Value) or CVC (Card Verification Code) is a three- or four-digit number that proves you have the physical card in your hand. It's printed on the card but not encoded in the magnetic stripe or the chip, so a merchant or payment processor cannot retrieve it from a card reader. They can only get it if you tell them.
When you pay online or over the phone, you type or speak the CVV. The merchant sends it to your card network or bank, which checks whether it matches the CVV on file. If it matches, the transaction is more likely to be genuine. If it doesn't match or is missing, the transaction may be declined or flagged for review.
This is why you should never share your CVV with anyone who contacts you unsolicited. Your bank will never ask for it by email, text, or phone. Scammers often call or text claiming to verify your account and ask for the CVV to "confirm" your card is still active. If someone asks for your CVV outside of a payment you initiated, hang up or delete the message and contact your bank directly using the number on your statement.
How payment networks and your bank use your details
When you swipe, insert, or tap your card at a store, or type your details online, the merchant's terminal or website sends your card information to a payment processor. The processor routes it to your card network — Visa, Mastercard, Discover, or American Express — which then contacts your bank to check whether the transaction is legitimate and whether you have enough available credit.
Your bank checks the amount, your recent transaction history, and any fraud rules you've set up. If everything looks normal, your bank approves the transaction and sends a code back through the network to the merchant. The merchant receives approval and completes the sale. The whole process usually takes a few seconds.
Your card network and bank also monitor your account for unusual activity. If you suddenly make a large purchase in a different country, or if multiple transactions appear in a short time from different locations, your bank may decline the transaction or call you to verify. This is a fraud prevention measure, not a problem with your account. If your card is declined and you believe the transaction was legitimate, call your bank's customer service number on the back of your card.
Protecting your card details from fraud and theft
Your card details are valuable to thieves because they can be used to make purchases or open new accounts. Protect them by treating your card number, expiration date, and CVV as sensitive information — the same way you'd protect your Social Security number or password.
Never type your card details into a link sent by email or text, even if the message appears to come from your bank or a merchant you recognize. Scammers create fake websites that look identical to real ones. Instead, go directly to the merchant's website by typing the address into your browser, or call the phone number on your statement or receipt. Never use a phone number from an email or text message.
When you pay in person, watch the card reader to make sure the merchant doesn't run your card through a skimming device. At ATMs and gas pumps, check that the card slot looks intact and hasn't been tampered with. If you notice anything unusual, use a different machine or go inside to pay.
If your card is lost or stolen, or if you see a transaction you didn't make, contact your bank when ready. Most banks have a fraud line open 24/7 — the number is on the back of your card or your statement. Your bank can freeze your account, cancel the card, and investigate unauthorized charges. Federal law limits your liability for fraudulent transactions, but you must report them promptly.
What information merchants should and shouldn't store
When you make a purchase, the merchant receives your card details to process the payment. However, they should not store your full card number, expiration date, or CVV after the transaction is complete. Payment Card Industry (PCI) standards require merchants to delete this information or encrypt it so thoroughly that it's useless if stolen.
Merchants may store a token — a substitute code that represents your card but is not the actual card number — so they can process future purchases without asking for your details again. This is how "saved payment methods" work on websites and apps. The token is only useful to that specific merchant and cannot be used elsewhere.
If you're concerned about a merchant storing your information, you can ask them what they keep on file and request that they delete it. You can also use a virtual card number, offered by some banks and credit card companies, which generates a one-time number for a single purchase. The virtual number is linked to your real card but cannot be reused, so even if it's stolen, it's worthless to a thief.
Frequently Asked Questions
Is it safe to give my card details over the phone?
Yes, if you initiated the call and are speaking with a merchant or company you recognize. Never give your card details to someone who called or texted you first. Legitimate companies will not ask for your CVV or full card number by phone unless you called them to make a purchase.
What should I do if I see a charge I don't recognize?
Contact your bank's fraud line when ready — the number is on the back of your card. Do not wait for your statement to arrive. Your bank can freeze the card, investigate the charge, and remove it from your account if it's fraudulent. You are not responsible for paying unauthorized charges if you report them promptly.
Can someone use my card if they only have the card number?
They can attempt online purchases, but most merchants will decline a transaction if the CVV doesn't match or if the billing address is wrong. In person, they cannot use the card without the physical card itself. If your card number is compromised but your card is still in your possession, contact your bank to request a new card with a different number.
Why do some websites ask for my billing address when I enter my card details?
The billing address is a verification tool. Your bank has your address on file, and the merchant sends it to your bank to confirm the transaction is legitimate. If the address doesn't match, the transaction may be declined. This is why it's important to keep your address current with your bank.
What's the difference between a debit card and a credit card number?
The format is the same — both have 16 digits (or 15 for American Express) — but they draw from different accounts. A debit card number pulls directly from your bank account, while a credit card number pulls from a line of credit issued by your bank or card company. The fraud protection and dispute process are similar, but credit cards offer more consumer protections under federal law.