The anatomy of a credit card number
The 16-digit number on the front of your credit card is not random. Each digit or group of digits tells the card issuer, the payment network, and merchants something specific about the account. Understanding what each section means helps you spot fraud, know which network your card uses, and understand why some numbers work and others do not.
The number breaks into four distinct parts: the industry identifier, the issuer identifier, the account number, and the check digit. Together, they form a system called the Issuer Identification Number (IIN), which was designed decades ago and is still the standard for all payment cards worldwide.
Key Takeaways
- The first digit of your credit card number identifies the industry — 4 for Visa, 5 for Mastercard, 3 for American Express, and 6 for Discover.
- Digits two through six identify your specific bank or card issuer, and this combination is unique to your financial institution.
- Digits seven through fifteen make up your individual account number, which is unique to you within your bank's system.
- The final digit is a check digit that validates the entire number using a mathematical formula called the Luhn algorithm.
- Knowing this structure helps you verify your own card information but does not make a number valid — the check digit and issuer's records are what matter.
The first digit: which payment network issued your card
The first digit of your credit card number identifies the payment network. Visa cards always start with 4. Mastercard cards always start with 5. American Express cards start with 3 (followed by a 4 or 7). Discover cards start with 6.
This digit matters because it tells merchants and payment processors which network to route the transaction through. When you swipe or insert your card, the payment terminal reads this first digit to determine whether to send the request to Visa's network, Mastercard's network, or another system. If a merchant does not accept Visa, your Visa card will be declined at that terminal, even though the card itself is valid.
Digits two through six: your bank's identifier code
The next five digits identify your specific bank or card issuer. This is called the Issuer Identification Number (IIN) or Bank Identification Number (BIN). Chase, Bank of America, Citi, American Express, and every other card issuer has its own IIN range.
When a merchant's payment processor receives your card number, it uses these six digits (the first digit plus the next five) to determine which bank issued your card. The processor then contacts that bank to verify the transaction. This is why a card from one bank might be processed faster than a card from another — different banks have different systems and response times.
You can look up which bank issued any card by searching the BIN online, though the full account number is required to actually use the card. Knowing the BIN is useful if you are troubleshooting a declined transaction or trying to understand why a specific card is not working with a particular merchant.
Digits seven through fifteen: your unique account number
These nine digits are your individual account number within your bank's system. No other cardholder at your bank has this exact sequence. This is the part of the number that ties the card to your specific credit line, your balance, and your payment history.
When you make a purchase, the merchant's system sends all 16 digits to your bank. Your bank uses these middle digits to look up your account, check your available credit, and decide whether to approve the transaction. If you have multiple cards from the same bank, each one has a different account number in this section, even though they share the same IIN.
The final digit: the check digit that validates the whole number
The last digit is a check digit, calculated using a formula called the Luhn algorithm. This digit exists to catch typos and fraud. When you enter your card number online or a merchant scans it, the payment system runs the Luhn algorithm on the first 15 digits to generate what the 16th digit should be. If it does not match, the number is rejected when ready.
This means you cannot straightforward change one digit of a valid card number and have it work — the check digit will no longer be correct. It also means that if you mistype your card number by one digit, the system will catch it before it ever reaches your bank. The Luhn algorithm is not a security feature in the sense that it does not prevent fraud, but it does prevent accidental errors from being processed.
Why card numbers are not enough to make a purchase
Knowing the structure of a credit card number might make it seem like the number itself is the only thing needed to use the card. It is not. A valid card number is only one piece of information required to process a payment.
In person, you must present the physical card or the merchant must verify your identity. Online, you need the card number, the expiration date, and the CVV (the three-digit security code on the back). For some transactions, merchants also request your billing zip code. For others, your bank may require additional verification through a text message or app. The card number alone, even if it passes the Luhn check, cannot be used without these other pieces of information.
How card numbers differ between card types
While most credit cards have 16 digits, not all payment cards follow this pattern. American Express cards have 15 digits instead of 16. Diners Club cards have 14 digits. Some debit cards and prepaid cards have 16 digits but are issued by networks other than the four major ones.
The structure remains the same — first digit for network, next five for issuer, middle digits for account, final digit for check — but the total length varies. This is why payment systems must be flexible enough to accept different card lengths. A merchant's terminal that only accepts 16-digit numbers will reject a valid American Express card.
Frequently Asked Questions
Can someone use my credit card number if they only have the 16 digits?
Not without additional information. Online purchases require the expiration date and CVV. In-person transactions require the physical card or identity verification. A card number alone cannot complete a transaction, though it is still sensitive information that should be protected.
What does the CVV have to do with the card number?
The CVV (Card Verification Value) is a separate three-digit code printed on the back of your card. It is not part of the 16-digit number and is not stored in the card's magnetic stripe or chip. Merchants use it to verify you have the physical card in your possession.
If I know the structure, can I generate valid card numbers?
You can generate numbers that pass the Luhn algorithm check, but they will not work for actual transactions. The number must also correspond to a real account at a real bank. Payment processors verify this by contacting the issuing bank, which is why fake numbers are rejected when ready.
Why do some cards start with different numbers than I expected?
Some banks issue cards on multiple networks or have multiple IIN ranges. A bank might issue both Visa and Mastercard products, or might have different IINs for different card types (rewards cards, business cards, etc.). The first digit always identifies the network, but the issuer can vary within that network.
Does the card number change if I get a replacement card?
Usually yes. If your card is lost, stolen, or damaged, your bank issues a new physical card with a new 16-digit number. Your account remains the same, but the card number changes for security reasons. Some banks allow you to keep the same number in rare cases, but this is not standard practice.