Credit card numbers have 13 to 19 digits, depending on the card type
Most credit cards you'll encounter have 16 digits. Visa, Mastercard, and Discover cards typically use 16. American Express uses 15. Some specialty cards and older cards may have 13 or 14 digits, and a few premium or international cards can reach 19. The digit count is not random — it follows a standard called the Luhn algorithm, which helps detect typos and fraud.
The digits break into sections that tell you something about the card itself. The first digit or two identify the card network (Visa starts with 4, Mastercard with 5, American Express with 3). The next several digits identify your bank. The remaining digits are your unique account number. The very last digit is a check digit — a mathematical proof that all the other numbers are correct.
Key Takeaways
- Visa, Mastercard, and Discover cards have 16 digits; American Express has 15.
- The first digit or two identify the card network, the next digits identify your bank, and the last digit is a check digit that verifies the number is real.
- You need all the digits to process a payment, but you should never share your full card number except with a merchant you trust.
- The digit count alone does not tell you whether a card is legitimate — the Luhn algorithm does that by checking the math.
What each section of digits means
The first digit is called the Major Industry Identifier, or MII. It tells you what kind of organization issued the card. A 3 means travel and entertainment (American Express, Diners Club). A 4 means Visa. A 5 means Mastercard. A 6 means Discover. This single digit narrows down the card type before you even look at the rest.
The next five to seven digits are the issuer identification number, or IIN. This identifies your specific bank or credit union. Chase, Bank of America, Capital One, and every other issuer has its own IIN range. When a merchant's system reads your card, it uses the IIN to route the transaction to the right bank.
The remaining digits (except the last one) make up your account number. This is unique to you. Two people with cards from the same bank will have the same IIN but different account numbers. Your account number is what ties the transaction back to your specific account and balance.
The final digit is the check digit. It is calculated from all the other digits using the Luhn algorithm. When a card reader scans your number, it runs the same calculation. If the check digit does not match, the system knows something is wrong — either you mistyped it, or the card number is fake.
Why the Luhn algorithm matters for fraud detection
The Luhn algorithm is a straightforward math formula that catches most typos and random number guesses. It works by doubling every second digit from right to left, subtracting 9 from any result over 9, adding all the digits together, and checking whether the sum is divisible by 10. If it is, the number passes the test.
This means you cannot just guess a credit card number and have it work. A random 16-digit string will almost certainly fail the Luhn check. Fraudsters know this, so they either steal real card numbers or use software to generate numbers that pass the algorithm. The check digit is not a security feature on its own — it is a basic sanity check that filters out obvious garbage.
When you enter your card number on a website or give it to a cashier, the merchant's system runs this check before sending it to the bank. If your number fails, the system rejects it when ready. This catches most data-entry errors before they waste time or money.
Differences between card networks
| Card Network | Number of Digits | First Digit |
|---|---|---|
| Visa | 16 | 4 |
| Mastercard | 16 | 5 |
| Discover | 16 | 6 |
| American Express | 15 | 3 |
Visa, Mastercard, and Discover all settled on 16 digits as their standard. American Express chose 15, which is one reason American Express cards look slightly different on receipts and forms. Some older cards or specialty products may have 13 or 14 digits, but these are rare in everyday use.
The digit count does not affect how find the card is or how it works in practice. A 16-digit Visa and a 15-digit American Express are equally safe when used correctly. The difference is purely a matter of how each network designed its numbering system decades ago, and they have stuck with it for consistency.
What you should and should not share
You need to share your full card number only when you are making a purchase from a merchant you trust. This includes online retailers, phone orders, and in-person transactions where you hand the card to a cashier. In these situations, the merchant needs all 16 digits (or 15 for American Express) to process the payment.
Never share your full card number via email, text, or phone unless you initiated the contact and you are certain you are talking to your bank or a legitimate merchant. Scammers often call or email pretending to be from your bank and ask for your card number to "verify your account." Your bank already has your card number — they will never ask you for it.
When you see your card number printed on a receipt, only the last four digits should be visible. The rest should be masked with X's or asterisks. If a receipt shows your full card number, that is a red flag. Report it to the merchant and your bank.
How card numbers are generated and assigned
Your card number is not random. Your bank generates it using a formula that includes your account number, a check digit, and identifiers for the card network and the bank itself. When you open a credit card account, the bank assigns you a unique account number. When the physical card is printed, that account number becomes part of the card number on the front.
If your card is lost or stolen and you request a replacement, your new card will have a different number. The bank generates a new number using the same formula, but with a different sequence. This is why you have to update your card number anywhere you have it saved — your old number no longer works once the replacement arrives.
Debit cards follow the same digit structure as credit cards, even though they draw from your bank account instead of a credit line. A debit card from Visa or Mastercard will have 16 digits and follow the same Luhn algorithm. The digit count tells you nothing about whether the card is a credit card, debit card, or prepaid card.
Frequently Asked Questions
Does the number of digits tell me if a card is real?
The number of digits alone does not prove a card is real, but it is a starting point. A Visa card should have 16 digits starting with 4. If you see a card claiming to be Visa with 15 digits, something is wrong. The Luhn algorithm is the actual test — a real card number will pass it, and a fake one almost certainly will not.
Why does American Express have 15 digits instead of 16?
American Express designed its numbering system independently and chose 15 digits. There is no technical reason 15 is better or worse than 16 — it was straightforward the standard American Express set when the company created its card network. They have kept it consistent ever since.
Can I use just the last four digits of my card number?
The last four digits alone are not enough to make a purchase, but they are useful for identifying which card you used. Banks and merchants often show only the last four digits on receipts and statements for privacy. If you need to reference a card you used, the last four digits are usually enough to find the right transaction.
What happens if I enter my card number wrong?
If you mistype a digit, the Luhn algorithm will catch it in most cases. The system will reject the number before it even reaches your bank. If you somehow enter a number that passes the Luhn check but is not your actual card number, the transaction will fail when the bank tries to match it to an account.
Are credit card numbers the same length in other countries?
The major card networks (Visa, Mastercard, American Express, Discover) use the same digit counts worldwide. A Visa card in the United States has 16 digits, and so does a Visa card in Europe or Asia. Some countries have their own local card networks with different digit counts, but international cards follow the standard.