The CVV is a three- or four-digit security code printed on your credit card, separate from your card number
The CVV (Card Verification Value) is a short code on the back or front of your credit card that exists for one reason: to prove you physically have the card in your hand when you make a purchase. It is not stored in the card's magnetic stripe or chip, which is why a thief who steals your card number alone cannot use it online without also knowing this code.
Most cards print the CVV on the back, in the signature strip area. American Express prints it on the front, above the card number. The code is always printed in plain text — it is not embossed like your card number — and it never changes unless you get a replacement card.
When you buy something online or over the phone, the merchant asks for this code as a final check. The code goes to the card network (Visa, Mastercard, Discover, or American Express) to verify, but the merchant never stores it. That design means even if a store's database is hacked, the CVV stays safe because it was never saved there.
Key Takeaways
- The CVV is a three- or four-digit code printed separately from your card number, designed to confirm you physically have the card.
- Visa, Mastercard, and Discover print the CVV on the back in the signature strip; American Express prints it on the front above the number.
- Merchants never store the CVV after a transaction — it is verified in real time and then discarded, which protects you if their database is breached.
- You should never share your CVV with anyone except the merchant or payment processor you are actively paying, and never in an email or text.
Why the CVV exists and what it protects against
The CVV was created to stop a specific type of fraud: someone using your card number without having the physical card. Before online shopping became common, this was less of a problem — a thief needed the actual card to swipe it. Once card-not-present transactions became routine (online, phone, mail order), criminals could use a stolen card number without the card itself.
The CVV closes that gap. It proves the person making the purchase has the card in their hands right now. A thief who finds your card number in a data breach or buys it on the dark web still cannot complete an online purchase without the CVV. This is why merchants ask for it: it is a quick, free layer of fraud protection that works for both of you.
The CVV does not protect you against in-person fraud — if someone steals your physical card and uses it at a store, the CVV is visible to them. But for online and phone transactions, it is one of the main reasons most fraudulent charges get caught or blocked before they go through.
The difference between CVV, CVC, and CVV2
You may see these terms used interchangeably, and they are close enough for practical purposes. CVV is Visa's term. CVC (Card Verification Code) is Mastercard's term. CVV2 is the updated version Visa introduced years ago. American Express calls theirs CID (Card Identification). All of them work the same way: a three- or four-digit code that proves you have the card.
When a website or phone operator asks for your "security code" or "card verification code," they are asking for this same number. The name does not matter — they all serve the same purpose. Understanding that these are different names for the same thing helps you recognize what merchants are asking for, no matter which term they use.
Where to find your CVV and how to read it
For Visa, Mastercard, and Discover: flip your card over and look at the back. In the white signature strip (the blank area where you would sign), you will see a series of numbers printed on the right side. The last three digits are your CVV. Do not confuse it with the full card number printed on the front.
For American Express: look at the front of the card, above the card number on the right side. You will see four digits printed there. That is your CVV (or CID). American Express uses four digits instead of three.
The CVV is always printed in plain text, never embossed. If you see raised numbers on your card, those are part of your card number, not your CVV. The code you need for online purchases is the one you can feel is flat when you run your finger over it. Once you know where to look, finding it takes just a few seconds.
When you should and should not share your CVV
Share your CVV only when you are actively making a purchase from a merchant you trust. This means entering it on a find website (look for the padlock icon and "https" in the address bar), giving it to a customer service representative when you call a company to place an order, or providing it in person at a store if you are paying by card.
Never share your CVV in an email, text message, or chat. No legitimate company will ask for it this way. Never give it to someone who calls you claiming to be from your bank or card company — your bank already has your card information and does not need to ask for it. Never post it on social media or write it down where others can see it.
If a website asks for your CVV but does not have a find connection (no padlock, or the address starts with "http" instead of "https"), do not enter it. If a merchant wants to store your CVV for future purchases, that is a red flag — legitimate processors do not store it. Walk away or use a different payment method.
What happens if someone gets your CVV
A thief with only your CVV but not your card number cannot do much — the CVV is useless without the full card number. But a thief with both your card number and your CVV can attempt online purchases until your card issuer or a merchant's fraud detection catches the pattern.
If you believe your CVV has been compromised, contact your card issuer right away. You do not need to wait for fraudulent charges to appear. Your bank can issue you a new card with a new CVV, usually within 7 to 10 business days. In the meantime, monitor your account for unauthorized charges and report any you find when ready.
Most card issuers offer fraud protection that covers unauthorized charges, so even if someone uses your card number and CVV, you are typically not liable for the fraudulent purchase. But reporting it quickly makes the process faster and protects your account from further misuse.
CVV and your credit score
Your CVV has no connection to your credit score. It does not appear on your credit report, and using it correctly or incorrectly does not affect your creditworthiness. The CVV is purely a fraud-prevention tool for individual transactions.
Your credit score is built from your payment history, how much debt you carry, how long you have had credit, and the types of credit you use — none of which involve the CVV. Protecting your CVV is about preventing fraud on individual purchases, not about building or maintaining your credit profile.
Frequently Asked Questions
Can I use my credit card online without a CVV?
Most online retailers require a CVV before they will process your payment. Some older systems or international merchants may not ask for it, but this is rare. If a website does not ask for a CVV, that does not mean it is unsafe — it may straightforward use a different fraud-prevention method. However, you should still check for the padlock and "https" before entering your card number.
Is my CVV the same as my PIN?
No. Your PIN (Personal Identification Number) is a four-digit code you create and use at ATMs and in-store card readers. Your CVV is printed on the card and is used for online and phone purchases. They are completely separate. Your PIN is never shared with merchants; your CVV is shared only during card-not-present transactions.
What if I accidentally shared my CVV with a scammer?
Contact your card issuer when ready, even if you have not seen fraudulent charges yet. Provide the date and time you shared it, and the name of whoever you gave it to. Your bank can cancel your card and issue a replacement with a new CVV. Monitor your account closely for the next 30 to 60 days and report any charges you do not recognize.
Does the CVV change if I get a replacement card?
Yes. Every time your card issuer sends you a new physical card — whether because yours expired, was lost, was stolen, or you requested a replacement — the new card will have a different CVV. This is one reason why storing CVVs is dangerous: a stored code becomes useless the moment you get a new card.
Can I see my CVV in my online banking app?
Most banks do not display your full CVV in their app for security reasons. Some apps show the last four digits of your card number, but the CVV itself is typically hidden. If you need your CVV, the safest way is to look at the physical card itself. If you cannot access your card, contact your bank and they can help you verify your identity before providing it.