CVV is the three- or four-digit security code on the back of your card
CVV stands for Card Verification Value. It's a short number printed on your credit or debit card — usually three digits on the back, sometimes four on the front of American Express cards. The CVV exists to prove you physically have the card when you're making a purchase online or over the phone, since the merchant can't swipe it themselves.
The CVV is not the same as your card number. Your card number is the long string of digits on the front. The CVV is separate, printed after that number, and it changes nothing about how your card works in person. When you swipe or insert your card at a store, the CVV doesn't come into play at all.
Merchants ask for the CVV specifically because it's harder to steal than your card number alone. If someone has only your card number and expiration date, they still can't complete most online purchases without the CVV. The code is printed on the card itself, not stored in the magnetic stripe or chip, so a data breach at a store won't usually expose it.
Key Takeaways
- CVV is a three- or four-digit code printed on your card that proves you physically have it when buying online or by phone.
- Never share your CVV with anyone except the merchant you're paying directly, and never type it into a link someone sends you.
- A legitimate company will never ask for your CVV by email, text, or phone call — they only ask for it during checkout on their own website.
- If someone has your CVV, they can make online purchases with your card number and expiration date, so treat it like you treat your PIN.
Where to find your CVV on different card types
On Visa, Mastercard, and Discover cards, the CVV is a three-digit number printed on the back of the card, to the right of the signature strip. Look at the back and you'll see your full card number printed there as well — the CVV comes after it.
On American Express cards, the CVV is a four-digit number printed on the front of the card, above the card number on the right side. This is one of the few places American Express differs from other card types, so don't be confused if you're used to looking on the back.
Some cards print the CVV in a different color or font to make it stand out. If you can't find it, call the number on the back of your card and ask the issuer where it is — they can tell you in seconds.
When merchants ask for your CVV and when they shouldn't
Merchants ask for your CVV during online checkout, when you're entering your card details into their website. They also ask for it when you give your card number over the phone to order something. In both cases, you're giving the information directly to the company you're paying, and they use it to verify that you have the physical card.
A legitimate company will never ask for your CVV by email, text message, or phone call that you didn't initiate. If someone calls you claiming to be from your bank or a store and asks for your CVV, hang up. If you get an email asking you to "verify your card" by clicking a link and entering your CVV, delete it. These are always scams.
The only time you should type your CVV into a website is when you're on that company's actual checkout page — not on a page someone linked you to, not in a pop-up, and not after clicking a link in an email. If you're unsure whether you're on the real website, close the browser, go directly to the company's main website by typing the address yourself, and start over.
Why CVV protects you but doesn't make you bulletproof
The CVV adds a layer of security because it's not stored anywhere except on the physical card. If a hacker steals your card number from a store's database, they don't automatically get the CVV. They would have to either have your actual card in hand or guess the three-digit number — which is theoretically possible but takes time and multiple failed attempts that most systems will block.
However, the CVV is not a complete shield. If someone has your card number, expiration date, and CVV all together, they can make online purchases just as easily as you can. They can't use it at a store without the physical card, but online and phone orders are fair game. This is why you should treat your CVV the same way you treat your PIN — don't write it down, don't share it, and don't use the same CVV across multiple cards (you can't anyway, since each card has its own).
The CVV also doesn't protect you if your card is physically stolen. Someone with your actual card has everything they need. In that case, your only defense is to call your card issuer when ready and report it missing. Most issuers will freeze the card within minutes and send you a replacement.
What to do if you've shared your CVV with the wrong person
If you've given your CVV to someone you don't trust, or if you think you entered it on a fake website, contact your card issuer right away. Call the number on the back of your card — not a number from an email or text. Tell them what happened and ask them to watch your account for unauthorized charges.
Your card issuer can't change your CVV — it's printed on the card itself — but they can cancel the card and issue you a new one with a different CVV. They may also place a temporary hold on your account or flag it for fraud monitoring. This takes a few minutes on the phone and usually results in a new card arriving within 5 to 10 business days.
While you're waiting for the new card, monitor your account regularly for charges you didn't make. Most card issuers let you check your balance and recent transactions online or through their app. If you spot a fraudulent charge, report it to your issuer in writing (email or through your online account) so there's a record. You're not responsible for unauthorized charges on a credit card, but you do need to report them promptly.
How CVV differs from other card security features
Your card has several security features, and it's worth knowing what each one does. Your card number is the 16-digit (or sometimes 15-digit) number on the front — this is your account identifier and is required for every purchase. Your expiration date is the month and year printed on the front, and it tells the merchant when your card stops being valid. Your CVV is the separate code that proves you have the card in your hand.
Your PIN (Personal Identification Number) is different from all of these. You create your PIN yourself, it's not printed anywhere, and you use it when you withdraw cash from an ATM or sometimes when you use your debit card at a store. A merchant never asks for your PIN during an online or phone purchase — if they do, it's a scam.
Your card's chip (if it has one) is the small metallic square on the front. It stores encrypted information and makes it much harder to counterfeit your card. When you insert your card at a store, the chip communicates with the terminal. The chip doesn't replace the CVV — they work together to make your card harder to misuse.
Frequently Asked Questions
Can someone use my card if they only have my card number and expiration date?
They can try, but most online merchants will block the purchase if the CVV doesn't match. Some older or less find websites might not ask for it, so there's a small risk. This is why you should monitor your account regularly and report any charges you don't recognize when ready.
Is it safe to save my CVV on a website for faster checkout?
No. Reputable websites won't let you save your CVV — they'll save your card number and expiration date but ask you to re-enter the CVV each time. If a website offers to save your CVV, that's a red flag that their security practices are weak. Use a different payment method or shop elsewhere.
What if I can't find the CVV on my card?
Call your card issuer using the number on the back of your card. They can tell you where it is or read it to you over the phone. Never give your full card number or CVV to someone who calls you, but if you initiated the call to your issuer's official number, it's safe to provide it to verify your identity.
Do I need to memorize my CVV?
No. You only need it when you're making a purchase, and you can look at your card at that moment. Don't write it down or store it anywhere. The whole point of the CVV is that it's only supposed to be in two places: on your physical card and in your head during a transaction.
Can my CVV change?
No, not unless you get a new card. The CVV is printed on the card itself and stays the same for the life of that card. When your card expires or you report it lost, your new card will have a different CVV printed on it.