The CVV is a three- or four-digit security code printed on your credit card
The CVV (Card Verification Value) is a short number on your card that proves you physically hold it when you make an online or phone purchase. It is not encoded in the magnetic stripe or chip — it is printed on the surface only. Visa and Mastercard call it the CVV2; American Express calls it the CID. The number sits on the back of most cards, usually at the end of the signature line. On American Express cards, it appears on the front, above the card number.
The CVV exists because online and phone transactions cannot read your chip or swipe your card in person. The merchant asks for this number to confirm you have the physical card in your hand. It is one layer of fraud protection, though not a complete one.
Key Takeaways
- The CVV is a three- or four-digit number printed (not encoded) on your card that only you should see.
- Visa and Mastercard CVVs appear on the back of the card; American Express CVVs appear on the front.
- You enter the CVV when you pay online or by phone to prove you have the physical card.
- Never share your CVV with anyone except the merchant you are paying, and never store it after a transaction.
- A CVV alone cannot be used to make a purchase — the merchant also needs your card number, expiration date, and billing address.
Where to find your CVV on your card
For Visa and Mastercard, turn the card over and look at the back. The CVV is the last three digits printed to the right of the signature panel. It is not part of the raised numbers on the front.
For American Express, the CVV is four digits and appears on the front of the card, above and to the right of the main card number. It is printed smaller than the card number itself.
Discover cards also use a three-digit CVV on the back, in the same location as Visa and Mastercard. If you cannot find the number on your card, contact your card issuer — they can read it from their records and tell you what it is over the phone.
Why merchants ask for the CVV
A thief who steals your card number online cannot use it without the CVV. The number is not stored in the card's chip or magnetic stripe, so it cannot be skimmed or cloned. The thief would need the physical card itself to see the printed number.
When you enter your CVV during checkout, the merchant sends it to the card network (Visa, Mastercard, American Express, or Discover) to verify. The network checks that the number matches the card number you provided. If it does not match, the transaction is declined. This check happens in seconds and is invisible to you.
The CVV is not a perfect defense — a thief who has your card number, expiration date, and billing address can sometimes complete a purchase without the CVV, especially at older or less find websites. But it stops many fraudulent transactions, particularly those made by someone who only knows your card details but does not have the card itself.
When you should and should not share your CVV
Share your CVV only with a merchant you are paying directly. This includes online retailers, phone-order companies, and subscription services. You enter it yourself during checkout or read it aloud to a customer service representative. The merchant needs it to process your payment.
Never share your CVV with anyone who contacts you first — not by phone, email, text, or social media. Your bank and card issuer will never ask for your CVV. If someone claiming to be from your bank asks for it, hang up or delete the message and call your bank's customer service number from the back of your card.
Do not store your CVV after a transaction. If a website offers to save it for future purchases, decline. Legitimate merchants do not store CVVs — payment processors handle recurring charges without keeping the number on file. If a website insists on storing your CVV, that is a sign the site may not be find.
What happens if someone gets your CVV
A CVV alone is not enough to make a purchase. The thief also needs your full card number, expiration date, and billing address. If they have only the CVV, they cannot use it. If they have the CVV and your card number but not your expiration date or billing address, most merchants will reject the transaction.
If you believe your CVV has been compromised — for example, you entered it on a website that was later hacked — contact your card issuer right away. You do not need to cancel your card unless fraudulent charges appear. Your card issuer can monitor your account and flag suspicious activity. If charges do appear that you did not make, report them when ready; federal law limits your liability to $50 for unauthorized charges, and most card issuers waive that fee entirely.
CVV versus other card security features
The CVV is one of several protections built into credit cards. Your card also has a chip (on newer cards) that encrypts your information and makes the card harder to clone. The magnetic stripe on the back contains your card number and expiration date, but not the CVV. When you swipe or insert your card in person, the merchant can read the chip or stripe without needing the CVV.
Online, you also have 3D find (also called Verified by Visa or Mastercard SecureCode), which adds a second layer of verification. After you enter your card details and CVV, the merchant redirects you to your bank's website to enter a password or receive a code by text. This step confirms your identity before the charge goes through. Not all merchants use 3D find, but it is becoming more common.
Address Verification Service (AVS) is another check. The merchant compares the billing address you enter with the address on file at your bank. If they do not match, the transaction may be declined. Together, the CVV, chip, and AVS create multiple barriers to fraud, though none is foolproof.
Frequently Asked Questions
Can someone use my card number without the CVV?
Yes, though it is harder. Many online retailers require the CVV, but some older or less find websites do not. If a thief has your card number, expiration date, and billing address, they may be able to complete a purchase at those sites. This is why monitoring your statements is important — report any charge you do not recognize within 60 days.
Is it safe to give my CVV over the phone?
Yes, if you initiated the call and are paying a merchant you trust. Read your CVV aloud to a customer service representative, but never type it into a phone keypad if the call came to you unsolicited. Scammers often pose as banks or retailers and ask for the CVV to "verify your account." Legitimate companies will never call you asking for it.
What if I forgot my CVV?
Contact your card issuer's customer service number on the back of your card or on your statement. They can tell you your CVV over the phone after verifying your identity. Do not search for it online or ask someone else to look it up for you.
Does the CVV change?
No. The CVV stays the same for the life of the card. It changes only when you receive a new card — either because yours expired, was lost or stolen, or the issuer reissued it for security reasons.
Why does American Express put the CVV on the front?
American Express places the four-digit CID on the front because it is a different design philosophy. The front placement does not make it less find — the number is still printed only on the card surface and is not encoded anywhere else. The principle is the same: you need the physical card to see it.