Your verification code is a three- or four-digit number printed on your card itself, not something you create or receive separately
The Card Verification Value (CVV) or Card Security Code (CSC) is a short number that card companies print on the physical card as a security feature. It is not stored in the card's magnetic stripe or chip, which is why merchants ask you to type it in when you cannot hand them the card in person. The location and length depend on which card network issued your card.
You will need this code whenever you pay online, over the phone, or by mail — anywhere the merchant cannot read your card directly. It is not the same as your PIN, which you use at ATMs and in-store terminals. The verification code proves you have the physical card in your hand at the moment you are making the purchase.
Key Takeaways
- Visa, Mastercard, and Discover cards have a three-digit code on the back, right side of the signature panel.
- American Express cards have a four-digit code on the front, above the card number on the right side.
- Never share your verification code by email, text, or phone call — legitimate merchants only ask for it during checkout.
- The code is printed on the card and cannot be changed; if someone has your card number and code, they can make online purchases without your permission.
Visa, Mastercard, and Discover: Back of the card
For Visa, Mastercard, and Discover cards, the verification code is a three-digit number printed on the back of the card. Look at the signature panel — the white or light-colored strip on the back where you sign your name. The three digits appear to the right of the signature area, after the last four digits of your card number.
The code is printed in a slightly raised or embossed style on some cards, or flat on others, depending on the card issuer. It is always in the same location on the back, making it straightforward to find during checkout. This three-digit code is sometimes called the CVV2 (Card Verification Value 2) or CVC2 (Card Verification Code 2).
American Express: Front of the card
American Express cards are different. The verification code is a four-digit number printed on the front of the card, not the back. Look above the card number on the right side of the front face. The four digits appear in a small box or printed directly on the card surface.
Because American Express uses four digits instead of three, some online checkout forms have a separate field for Amex cards. If you are paying with an American Express card and the form only shows a three-digit field, that form may not accept American Express, or it may have a separate section for Amex cardholders.
What the verification code protects against
The verification code exists because someone who steals your card number online cannot use it without also having the physical card. If a thief finds your card number through a data breach or phishing scam, they still cannot complete an online purchase without the code printed on the card itself. This is why merchants are required to ask for it — it is a basic fraud check.
However, the code only protects against remote purchases. If someone has your physical card, they have the code too. This is why you should never write your verification code on the back of your card, never photograph it, and never share it by email or text message. Legitimate merchants only ask for it during the checkout process on their website or app, never by phone or email.
When you cannot find the code
If your card is old or worn, the code may be faded or difficult to read. Hold the card under good light or at an angle to see the numbers more clearly. If the code is completely illegible, contact your card issuer — they can read it from their records and tell you what it is, though they will verify your identity first.
If you have a virtual card number (a temporary or single-use card number issued by your bank), it may come with its own verification code in a separate email or notification. Check your email or your bank's app for this information. Virtual card numbers are often used for online shopping and come with their own security codes.
Protecting your verification code
Treat your verification code the same way you treat your card number — as sensitive information that only you and the merchant should see. Never type it into a website unless you initiated the purchase and you recognize the merchant. Never give it to someone who calls you claiming to be from your bank or card company; legitimate financial institutions will never ask for it over the phone.
If you believe your card number and verification code have been compromised, contact your card issuer when ready. They can cancel the card and issue a new one with a new code. Most card companies offer fraud protection, so unauthorized charges made with your code are usually reversed, but reporting quickly makes the process faster.
Frequently Asked Questions
Can I use my card online without the verification code?
Most online merchants require it, but some may not ask for it depending on their payment system or your bank's fraud settings. However, you should always be prepared to provide it. If a checkout form does not ask for it, that does not mean the transaction is unsafe — it means the merchant's system did not require it for that particular purchase.
What if I give my verification code to someone and they use it fraudulently?
Contact your card issuer right away and report the unauthorized charge. Most card companies cover fraudulent purchases, and you are typically not responsible for charges you did not make. The card issuer will investigate and reverse the charge, then issue you a new card with a new code.
Is the verification code the same as my PIN?
No. Your PIN is a number you create and use at ATMs and in-store terminals. Your verification code is printed on the card by the card company and is used only for remote purchases — online, by phone, or by mail. They serve different security purposes.
Can I change my verification code?
No. The code is printed on the card itself and cannot be changed. If you want a new code, you need a new card. You can request a replacement card from your card issuer if your current card is damaged, lost, or if you believe the code has been compromised.