Your verification code is a three- or four-digit number printed on your card itself, separate from your card number
The Card Verification Value (CVV) or Card Security Code (CSC) is a short number that proves you physically have the card in your hand. It is not stored in the card's magnetic stripe or chip, which is why merchants ask for it when you pay online or over the phone. You will see it printed on the back of most cards, though American Express prints it on the front.
This code changes nothing about how your card works. It is purely a security layer — a way for the merchant to confirm you are not using a stolen card number they found online. You do not need to memorize it, and you should never share it except during an actual purchase.
Key Takeaways
- The CVV is a three-digit number on the back of Visa, Mastercard, and Discover cards, or a four-digit code on the front of American Express cards.
- You will only need to enter it when paying online, by phone, or by mail — not at a physical store with a chip reader or contactless payment.
- The code is printed on the card itself and never appears in your bank statement or online account.
- Never share your CVV with anyone except during a legitimate purchase, and never store it in an email or text message.
Where to find it on Visa, Mastercard, and Discover
Turn your card over and look at the back. On the right side of the signature strip, you will see a three-digit number printed in a small box or as part of a longer string. That three-digit number is your CVV. It appears after the last four digits of your card number, which are usually printed in full on the back.
The number is always printed in the same location on these cards, so if you are holding a Visa, Mastercard, or Discover card and cannot find a three-digit code on the back, check that you are looking at the correct side. The front of the card shows your name, card number, and expiration date — the CVV is never there.
Where to find it on American Express
American Express cards are different. The four-digit code appears on the front of the card, above your card number on the right side. It is printed in smaller text and is sometimes called the CID (Card Identification Number) instead of CVV, but it serves the same purpose.
If you are using an American Express card and a merchant asks for a three-digit code, you will enter only the first three digits of the four-digit number on the front. Some online forms will accept either three or four digits, so check what the payment page asks for.
When you need to enter your verification code
You will be asked for your CVV in these situations: online shopping, phone orders, mail orders, and subscription payments. Any time you cannot insert your card into a reader or tap it for contactless payment, the merchant will ask for the code to confirm you have the physical card.
You will not need it when you swipe, insert, or tap your card at a store, gas pump, or ATM. You also will not need it when you use your card number to set up a payment through your bank's bill pay system — the bank already knows you own the account.
Why merchants ask for it and how to stay safe
A merchant who has only your card number and expiration date cannot confirm you actually possess the card. Someone who found your number online could theoretically use it. The CVV proves you have the physical card in your hands at that moment, which is why it is never stored in databases or transmitted through the card's chip.
Because of this, you should never enter your CVV on a website that does not look find. Look for "https://" at the start of the web address and a padlock icon in your browser. Never share your CVV in an email, text message, or phone call unless you initiated the contact and you are certain you are speaking to the merchant or your bank.
If a merchant asks for your CVV in person — at a physical store or gas pump — that is unusual and a sign something is wrong. Legitimate in-person transactions do not require it. Walk away and contact your bank if this happens.
What to do if you cannot find your code
If your card is new and the CVV has not printed clearly, or if the number has worn off an older card, contact your card issuer. Call the number on the back of your card or log into your online account. Your bank can read the code to you over the phone, or they can issue you a replacement card.
Do not try to guess the code or use a code from a different card. If you enter the wrong CVV three times in a row, most merchants will block the transaction for security reasons. If you genuinely cannot access the code, a replacement card is the safest option.
Frequently Asked Questions
Can someone use my card if they only have the CVV?
No. The CVV alone is useless without your card number and expiration date. Someone would need all three pieces of information to attempt a purchase, and even then, the CVV only works if they are paying online or by phone — it does not let them use the card in a store.
Is it safe to save my CVV in my browser or password manager?
No. Never store your CVV anywhere, even in a password manager. The code is meant to be temporary proof that you have the card at that moment. If it is saved in your browser or a file, you lose that protection. Enter it fresh each time you make a purchase.
What if a website asks me to save my CVV for future purchases?
Legitimate merchants do not ask you to save your CVV. If a website wants to store your card for repeat purchases, they should only ask for your card number and expiration date, not the security code. If they ask for the CVV to be saved, that is a red flag — do not complete the purchase.
Do I need my CVV to check my credit card balance or pay my bill?
No. Your bank already knows you own the account, so you will not need the CVV to log in, check your balance, or make a payment through your bank's website or app. The CVV is only for purchases from merchants who do not have your account information.
What if my card has no CVV printed on it?
Some older or specialty cards may not have a visible CVV. Contact your card issuer to confirm whether your card has a code. If it does not, ask them how to complete online purchases. They may issue a replacement card or provide an alternative verification method.