The security code is a three- or four-digit number printed on your card that proves you physically have it
The security code (also called CVV, CVC, or card verification value) is a short number that appears on the back of most credit cards, separate from your card number. On American Express cards, it appears on the front. When you enter this code during an online or phone purchase, the merchant knows you have the actual card in your hand — not just the number.
This code is not stored in the magnetic stripe or chip on your card, and it does not appear on receipts or statements. That separation is what makes it useful: a thief who steals your card number alone cannot complete an online transaction without also knowing this three- or four-digit code.
Key Takeaways
- The security code is printed on the back of your card (or front, for American Express) and is three or four digits long.
- You only need to enter it for online and phone purchases, not for in-person transactions at a store or ATM.
- Never share your security code by email, text, or phone call — legitimate companies will never ask for it that way.
- The code changes only if you get a replacement card; it stays the same for the life of your current card.
Where the security code appears on your card
On Visa, Mastercard, and Discover cards, the security code is printed on the back, to the right of the signature strip. It is the last three digits of a longer number. You do not need to enter the full number — only those three digits.
On American Express cards, the code is four digits and appears on the front, above the card number on the right side. American Express calls this the CID (Card Identification Number) instead of CVV, but it serves the same purpose.
The code is always printed, never embossed or raised like the card number. This makes it harder for someone to copy it by rubbing a pencil over the card.
When you need to enter your security code
You will be asked for your security code whenever you make a purchase without physically handing your card to someone. This includes online shopping, phone orders, and mail orders. The merchant's payment system will have a field labeled "CVV," "CVC," "Card Verification Value," "Security Code," or sometimes "3-Digit Code."
You do not need to provide your security code when you swipe or insert your card at a store, gas pump, or ATM. You also do not need it to check your balance or make a payment to your card issuer — they already know your code is legitimate because they issued the card.
Some recurring subscriptions (streaming services, gym memberships, utilities) will ask for your security code once when you set up the account. After that, the merchant stores your card information and charges you without asking for the code again.
How to protect your security code
Your security code is the one piece of your card information you should never share by email, text message, or phone call. A legitimate company will never ask for it that way. If someone calls claiming to be from your bank and asks for your security code, hang up and call your bank directly using the number on the back of your card.
When you shop online, make sure the website address starts with "https://" (not just "http://") and look for a padlock icon in the address bar. These signs mean the page encrypts your information as it travels to the merchant's server.
If your card is lost or stolen, call your card issuer right away. They will cancel the card and send you a replacement with a new security code. Until the replacement arrives, your old code is useless because the card itself is no longer active.
What happens if someone gets your security code
A thief who has only your security code cannot make a purchase — they also need your full card number, expiration date, and billing address. If they have all of those pieces, your security code is one more barrier, but not the only one.
If you notice a charge you did not make, contact your card issuer when ready. Most credit cards offer fraud protection, which means you are not responsible for unauthorized charges once you report them. Your bank will investigate and typically refund the amount within one to two billing cycles.
You do not need to change your security code yourself. It stays the same for the life of your card. The only way to get a new code is to request a replacement card from your issuer.
Security code versus other card numbers
Your card number (the 16 digits on the front) is different from your security code. The card number is what identifies your account and is used for all transactions. Your security code is an extra verification step for remote purchases.
Your expiration date is also separate. It tells the merchant when your card stops being valid, but it does not prove you have the card in your hand the way the security code does.
Your PIN (Personal Identification Number) is something you create and memorize — it is not printed on your card at all. You use your PIN at ATMs and sometimes at stores when you choose "debit" instead of "credit." Your PIN is different from your security code and serves a different purpose.
Frequently Asked Questions
Can I use my card online without a security code?
Most online merchants require it, but some older or smaller websites may not ask. If a site does not ask for your security code, that does not mean it is unsafe — it just means the merchant chose not to use that extra verification step. However, reputable sites almost always ask for it.
What if I cannot find my security code?
If your card is damaged or the number is worn away, contact your card issuer and request a replacement card. They can send you a new one with a readable security code. You can usually make this request online through your account portal or by calling the number on the back of your card.
Is my security code the same as my CVV?
Yes. CVV stands for Card Verification Value. Different card companies use different names (Visa calls it CVV2, Mastercard calls it CVC, American Express calls it CID), but they all refer to the same three- or four-digit code on your card.
Do I need to memorize my security code?
No. You only need it when you are making a purchase, and you can look at your card at that moment. Do not write it down or store it anywhere — keeping it in your head or on the card itself is the safest approach.
Will my security code change if I get a new card?
Yes. Every replacement card has a new security code. If your card issuer sends you a new card due to fraud, expiration, or damage, the security code will be different from the old one.