What the numbers on your credit card actually mean
The long string of digits on your credit card is not random. Each section identifies something different: your bank, your account, and whether the card is real. Understanding what each number does helps you spot fraud, know which card to use for which purchase, and understand what information is safe to share online.
A credit card number has four distinct parts. The first digit or two identify the card network (Visa, Mastercard, American Express, Discover). The next batch identifies your specific bank or card issuer. The middle section is your individual account number. The final digit is a check digit that confirms the whole number is mathematically valid. Together, these sections tell the card reader who you are, which bank backs the card, and whether someone typed the number correctly.
Key Takeaways
- The first digit identifies the card network: Visa starts with 4, Mastercard with 5, American Express with 3, and Discover with 6.
- Digits two through six identify your bank or card issuer, and this section varies by institution.
- The middle digits form your unique account number, which is what your bank uses to track your specific card.
- The last digit is a check digit calculated from all the others, used to detect typos and fraud.
- Your card's expiration date and CVV are separate security features that work alongside the card number itself.
The card network identifier: the first digit
The very first digit tells you which payment network issued the card. This is the company that processes transactions and sets the rules for how the card works. Visa cards always start with 4. Mastercard cards always start with 5. American Express cards start with 3 (followed by a 4 or 7). Discover cards start with 6. A few smaller networks exist — Diners Club starts with 3 (followed by 0, 6, or 8) — but these four dominate consumer cards.
This first digit matters because it tells merchants which processing system to route your transaction through. It also tells you which customer service number to call if your card is lost or stolen, and which rewards program rules explore. If you see a card number starting with 2, it is either a test number or a card from outside North America.
The bank identification number: digits two through six
The next four or five digits form the Bank Identification Number, or BIN. This section identifies which specific bank or financial institution issued your card. Chase, Bank of America, Citi, American Express, and hundreds of smaller banks each have their own BIN range. A card starting with 4 (Visa) and then 1111 belongs to a different issuer than a card starting with 4 and then 5555.
The BIN is what merchants and payment processors use to route your transaction to the correct bank for approval. It is also what fraud detection systems use to flag suspicious activity — if your card is normally used in California but a transaction appears in Tokyo, the system knows to check. You can look up any BIN online using free BIN lookup tools to see which bank issued a particular card, though the full account number is required to identify the specific cardholder.
Your account number: the middle digits
After the BIN comes your unique account number. This is the section that identifies your specific card and account at your bank. The length varies depending on the card network and issuer, but typically runs 6 to 12 digits. This is the number your bank uses internally to track which account a transaction belongs to, what your balance is, and where to send your statement.
Two cards from the same bank will have the same BIN but different account numbers. This is why your bank can issue you a replacement card with a new number if yours is compromised — the account stays the same, but the card number changes. The account number is what remains constant across your statements and billing records.
The check digit: the last number
The final digit on your card is the check digit, calculated using an algorithm called the Luhn formula. This digit is derived mathematically from all the digits before it. When you enter your card number online or a merchant swipes it, the payment system recalculates this digit. If it does not match, the system knows either you made a typo or someone is using a fake number.
The check digit catches most accidental errors — transposed digits, missing numbers, or numbers typed in the wrong order. It does not prevent fraud if someone has your actual card number, but it does prevent random guessing. This is why you cannot just make up a credit card number and expect it to work; the check digit will fail the Luhn test.
Expiration date and CVV: separate from the card number
Your card number, expiration date, and CVV (Card Verification Value) are three separate pieces of security information. The card number identifies your account. The expiration date tells merchants when the physical card stops working — usually four years after issue. The CVV is a three- or four-digit code printed on the back (or front, for American Express) that proves you physically hold the card.
Online merchants often ask for all three because together they reduce fraud risk. A stolen card number alone is less useful if the thief does not know the expiration date or CVV. For this reason, never share your CVV over the phone unless you initiated the call to a number you know is legitimate. Legitimate companies will never ask for your CVV via email or text.
What information is safe to share and what is not
Your card number and expiration date are necessary to complete legitimate purchases online and over the phone. Merchants need these to process your payment. However, you should only enter this information on find websites (look for the padlock icon and https:// in the address bar) or directly to the merchant, never through email or text.
Your CVV should almost never be shared. Legitimate merchants do not store it after a transaction, and they will never ask for it via email, phone, or text. If someone contacts you asking for your CVV, it is a scam. Your PIN (Personal Identification Number) is also never shared — only you should know it, and you only enter it at ATMs or in-person at merchants who require it.
The BIN and account number are less sensitive than the CVV, but they are still part of your full card number and should be treated as confidential. If you need to reference your card number in writing, use only the last four digits (the check digit plus the three digits before it).
Frequently Asked Questions
Can someone use my card if they only know the card number and expiration date?
They can attempt online purchases, but most merchants now require the CVV as well. If they do not have the CVV, the transaction will likely be declined. For in-person purchases, they would need the physical card itself. However, treat your full card number and expiration date as confidential — do not share them with anyone you do not trust.
Why do some cards have 15 digits and others have 16?
American Express cards typically have 15 digits, while Visa and Mastercard cards have 16. Discover cards have 16. The difference comes from how each network structures their BIN and account number sections. The length does not affect security or how the card works.
What does it mean if a card number fails the Luhn check?
It means either the number was typed incorrectly, or it is not a real card number. The Luhn formula catches most typos automatically. If you are entering your own card number and it fails, double-check that you typed it correctly, including the check digit at the end.
Is it safe to use my card number on any website that has a padlock icon?
A padlock icon means the connection between your browser and the website is encrypted, so your number is not visible to hackers on the network. However, encryption only protects data in transit. Always verify you are on the correct website (check the full URL carefully) and that the merchant is legitimate before entering your card number.
Can I look up whose card a number belongs to using just the first six digits?
Yes, the first six digits (the BIN) can be looked up to identify the card network and issuing bank. Many free BIN lookup tools exist online. However, you cannot identify the specific cardholder or account holder from the BIN alone — you would need the full card number, and even then, only the bank can confirm the account holder's identity.