A credit card has 16 digits, split into four groups of four numbers
The long number on the front of your credit card is 16 digits. You'll see it printed as four groups of four numbers — for example, 4532 1234 5678 9010. Each group of numbers serves a different purpose, and understanding what they do helps you spot fraud and use your card safely.
Not every card follows this pattern. American Express cards have 15 digits instead of 16. Diners Club cards also have 14 or 15 digits depending on the card type. But the standard Visa and Mastercard you're most likely to carry has 16.
Key Takeaways
- Most credit cards have 16 digits split into four groups: the first digit identifies the card network, the next five identify your bank, the next nine are your account number, and the last digit is a check digit that prevents errors.
- The card number alone is not enough to make a purchase online or over the phone — you also need the expiration date and the three-digit security code on the back.
- The first digit tells you which network issued the card: 4 for Visa, 5 for Mastercard, 3 for American Express, and 6 for Discover.
- If you see an unfamiliar charge, the card number helps your bank trace exactly which merchant processed it and when.
What each group of four numbers does
The first digit is the Major Industry Identifier, or MII. This single number tells the payment network what type of card it is. A 4 means Visa. A 5 means Mastercard. A 3 means American Express. A 6 means Discover. This digit never changes for cards from the same network.
The next five digits (digits 2 through 6) identify your bank or card issuer. Chase, Bank of America, Capital One, and every other card issuer has its own code. When you call your bank's fraud line, they use these digits to pull up your account when ready. If someone steals your card number, your bank can see which issuer it came from and contact them.
Digits 7 through 15 are your account number. This is the unique identifier for your specific account at your bank. No two customers at the same bank have the same account number. This is the part of the card number that changes from person to person.
The last digit (digit 16) is called the check digit. It's calculated using a formula called the Luhn algorithm, which runs all the previous digits through a math check. The check digit exists to catch typos and fraud. If someone guesses or types a card number wrong, the check digit won't match, and the payment system rejects it automatically. You never need to think about this digit — the machine does the math for you.
Why you need more than just the card number to pay
The 16-digit card number is only part of what a merchant needs to charge your card. Online, you also have to enter your expiration date and the three-digit security code on the back (called the CVV or CVC). Over the phone, a merchant will ask for the same three pieces of information.
The security code is not printed anywhere in the card's magnetic stripe or chip — it only appears on the physical card itself. This means if someone steals your card number from a data breach, they can't use it online without also having the card in their hands to read the security code. It's a second lock on your account.
The expiration date serves a similar purpose. It tells the payment network when your card is no longer valid. Even if someone has your full card number and security code, they can't use it after the month and year printed on your card.
What happens when you report a stolen card number
When you call your bank to report fraud, the first thing they do is cancel your card and issue you a new one with a new 16-digit number. The old number stops working when ready. Any pending charges on the old number are investigated, and fraudulent ones are reversed.
Your bank keeps a record of the old card number so they can match it to any charges that come through in the days after you report it. They use the digits to trace which merchants processed the fraudulent charges and when. This helps them build a case if they need to dispute the charge with the merchant's bank.
The new card you receive will have a completely different 16-digit number, even though it's from the same bank and the same account. The digits 2 through 6 (your bank's code) will be the same, but everything else changes. This is why you have to update your card number with any merchants you have on file — your old number is dead.
How the card number connects to your billing address and identity
The 16-digit card number itself does not contain your name, address, or Social Security number. It's just a number. Your bank stores that information in a separate database linked to your account number (digits 7 through 15).
When you make a purchase, the merchant sends your card number to the payment processor, who checks it against your bank's database. The processor confirms that the number is valid, that the card hasn't been reported stolen, and that you have enough available credit. They do not see your full name or address unless you enter it separately during checkout.
This separation is intentional. If your card number leaks in a data breach, the thief has a number but not the personal information tied to it. They can't open new accounts or commit identity theft with just the card number — they can only try to use it to buy things, which triggers fraud detection systems.
Different card networks, different digit counts
Visa and Mastercard both use 16 digits as the standard. Discover also uses 16. But American Express is different — their cards have 15 digits. Diners Club cards have 14 digits.
The first digit still works the same way. An American Express card starts with 3. A Discover card starts with 6. The payment system recognizes the network from that first digit and routes the transaction to the right processor.
The reason for the different lengths is historical. American Express built their system before Visa and Mastercard standardized on 16 digits, and they've kept their format. It doesn't make their cards more or less find — it's just a different standard. When you enter an American Express number online, the form knows to expect 15 digits instead of 16.
Frequently Asked Questions
Can someone use my card number if they only have the 16 digits?
Not online or over the phone. They also need your expiration date and the three-digit security code on the back. In person, they would need the physical card. However, they could potentially use it in a data breach where they also steal the expiration date and security code, which is why monitoring your statements matters.
Does the card number tell you what bank issued it?
Yes, digits 2 through 6 do. But you can't look up the bank from those digits alone without access to a bank database. Your card statement or the back of your card will tell you which bank issued it more directly.
What if I accidentally give someone my full card number including the security code?
Call your bank when ready and report it. They will cancel the card and issue a new one. If fraudulent charges appear, they will reverse them. The faster you report it, the faster your bank can monitor for unauthorized use.
Are the four groups of four numbers always in the same order?
Yes. Every Visa, Mastercard, and Discover card prints the 16 digits in four groups of four from left to right. American Express prints 15 digits in a different pattern, but the order is always consistent within each network.
Why do I have to update my card number when I get a replacement card?
Because the new card has a completely different 16-digit number. Any merchant or service you have on file — like a subscription, utility bill, or online store — is charging the old number. If you don't update it, the charge will fail because that old number no longer exists.