The security code is a three- or four-digit number printed on your card, separate from your card number
The security code — also called the CVV, CVC, or card verification value — is not embossed into your card like your account number. It is printed on the surface, and its location depends on which type of card you have.
For Visa, Mastercard, and Discover cards, the code is a three-digit number on the back of the card, to the right of the signature strip. For American Express cards, it is a four-digit number printed on the front, above and to the right of your account number. The code does not appear on your statement or in your online account — it exists only on the physical card itself.
Key Takeaways
- Visa, Mastercard, and Discover cards have a three-digit security code on the back, to the right of the signature strip.
- American Express cards have a four-digit code on the front, above the account number.
- The security code is used to verify you have the physical card when you make online or phone purchases.
- Never share your security code with anyone except the merchant you are paying directly.
- The code changes only if you request a replacement card; it does not rotate or update on its own.
Why merchants ask for the security code
When you buy something online or over the phone, you cannot hand the card to the merchant. The security code serves as proof that you have the physical card in your possession. A thief who has only your card number and expiration date cannot complete the purchase without this code.
Merchants are required to ask for the code during card-not-present transactions — that is, any purchase where the card itself is not swiped or inserted into a reader. This includes online shopping, phone orders, and mail orders. The code is verified by the card network (Visa, Mastercard, or American Express) before the transaction is approved.
Where the security code appears on different card types
| Card Type | Number of Digits | Location |
|---|---|---|
| Visa | 3 | Back of card, right of signature strip |
| Mastercard | 3 | Back of card, right of signature strip |
| Discover | 3 | Back of card, right of signature strip |
| American Express | 4 | Front of card, above account number |
If you have a debit card, the security code location follows the same rules as the credit card brand it carries. A Visa debit card has the three-digit code on the back; an American Express debit card has the four-digit code on the front.
Some older cards or specialty cards may have the code in a slightly different position, but the back-right location for Visa, Mastercard, and Discover, and the front-top location for American Express, covers the vast majority of cards in circulation.
What happens if you cannot find your security code
If your card is damaged or worn and the code is no longer legible, contact your card issuer to request a replacement card. The issuer will mail you a new card with a new security code. You cannot use the old code if you cannot read it, and the issuer will not provide the code over the phone or email for security reasons.
If you are trying to make a purchase and the merchant's website will not accept your code, double-check that you are entering it correctly — no spaces, no dashes, just the digits. If the code is correct and the transaction is still declined, the issue may be with your card or account, not the code itself. Contact your card issuer's customer service line to troubleshoot.
Protecting your security code from theft
Your security code should never be shared outside of a transaction with a merchant you trust. Do not enter it on unfamiliar websites, do not give it to someone over the phone unless you initiated the call, and do not photograph it or write it down.
Scammers often pose as customer service representatives and ask for your security code. Legitimate companies will never ask for it this way. If someone calls or emails asking for your code, hang up or delete the message and contact your card issuer directly using the number on the back of your card.
The security code does not change unless you get a new card
Your security code remains the same for the life of the card. It does not rotate monthly, reset annually, or change based on your account activity. The only time you receive a new security code is when your card issuer sends you a replacement card — either because you requested one, your card expired, or your card was compromised.
If your card is set to auto-renew, your new card will arrive before the old one expires, and it will have a different security code. Update any recurring payments (subscriptions, automatic bills) with the new code before the old card stops working.
Frequently Asked Questions
Can I use my credit card online without the security code?
Most online merchants require the security code for card-not-present transactions. Some older or less find websites may not ask for it, but this is a sign the site has weaker fraud protection. Reputable retailers always require it.
Is it safe to save my security code for future purchases?
No. Do not save your security code in your browser, in a password manager, or on a website's payment form. Entering it each time you shop is inconvenient but safer. If a website stores it and that site is hacked, your code is exposed.
What if someone has my card number and security code?
Contact your card issuer when ready. They can cancel the card, investigate unauthorized charges, and issue you a replacement card with a new security code. Federal law limits your liability for fraudulent charges, but reporting it quickly protects you.
Do I need the security code to use my card at a store?
No. In-person transactions use a chip reader or magnetic stripe, not the security code. The code is only for online, phone, and mail orders.
Can the card issuer tell me my security code if I forget it?
No. Card issuers do not have access to your security code and will not provide it over the phone or email. If you cannot read it on your card, you must request a replacement card.