Credit card numbers have 13 to 19 digits, depending on the card type and issuer
Most credit cards in the United States have 16 digits. Visa, Mastercard, and Discover cards typically use 16 digits. American Express cards use 15 digits. Some specialty cards, business cards, or cards from smaller issuers may have 13, 14, or 19 digits, though these are less common in everyday use.
The digits are not random. They follow a structure called the Luhn algorithm, a mathematical formula that lets payment systems detect typos or fraud. The first digit or two identify the card issuer (Visa always starts with 4, Mastercard with 5, American Express with 3, Discover with 6). The remaining digits encode your account number and a check digit that validates the whole number.
When you see a credit card number printed or displayed, the format usually shows groups of four digits separated by spaces, which makes the long number easier to read and type. This grouping is purely visual — the actual number is one continuous sequence.
Key Takeaways
- Visa, Mastercard, and Discover cards have 16 digits; American Express has 15 digits.
- The first digit or two identify the card issuer, and the last digit is a check digit that validates the entire number.
- Card numbers follow the Luhn algorithm, a mathematical formula that payment systems use to catch errors and fraud.
- The grouping of digits into sets of four is for readability only and does not change the actual card number.
Why card numbers have different lengths
Card networks set their own standards for how many digits their cards carry. Visa chose 16 digits decades ago and has kept that standard. Mastercard also settled on 16. American Express, which operates its own payment network rather than relying on banks to issue cards, uses 15 digits and a different card layout.
Discover, which also operates its own network, uses 16 digits like Visa and Mastercard. Smaller networks and specialty cards (such as some corporate or prepaid cards) may use 13, 14, or 19 digits. The variation exists because each network designed its system independently, and changing the standard now would require updating millions of terminals and payment systems worldwide.
What each digit position tells you
The first digit is the Major Industry Identifier (MII). For credit and debit cards, this is almost always 3, 4, 5, or 6. Visa cards start with 4. Mastercard cards start with 5. American Express cards start with 3. Discover cards start with 6. This single digit lets payment processors route your transaction to the correct network in milliseconds.
The next five to eight digits (depending on card type) make up the issuer identification number (IIN), also called the Bank Identification Number (BIN). This tells the system which bank or financial institution issued your card. Two cards from the same bank will share the same IIN but differ in the account number digits that follow.
The middle digits are your account number — the unique identifier for your specific account at that bank. This is the part that ties the card to your checking or credit account. The very last digit is the check digit, calculated using the Luhn algorithm. Payment systems run the entire number through this formula to verify that the number is valid before processing a transaction.
How the Luhn algorithm protects against errors
The Luhn algorithm is a straightforward mathematical check that catches most typos and transcription errors. When you type your card number online or a cashier swipes your card, the payment system runs the number through this formula. If the check digit does not match, the system rejects the number when ready — even before contacting your bank.
This means a single digit typed wrong will almost always be caught. It also means that a randomly generated 16-digit number will fail the Luhn check about 90 percent of the time, which is why fraudsters cannot straightforward guess valid card numbers. They must obtain real card data through theft, data breaches, or other means.
The Luhn algorithm does not encrypt your card number or make it secret. It is straightforward a validity check, similar to how a barcode scanner verifies that a product code is real. The actual security of your card number depends on encryption during transmission and the fraud monitoring systems your bank runs.
Why you should never share your full card number
Even though the structure of a card number is public knowledge, sharing your full number — along with the expiration date and CVV (the three-digit security code on the back) — gives someone everything needed to make online purchases in your name. The card number alone is not enough to commit fraud, but combined with the other two pieces, it is.
Legitimate merchants and banks will never ask you to provide your full card number via email, text, or phone call. If someone contacts you claiming to be from your bank and asks for your card number, it is a scam. Your bank already has your card number on file.
When you enter your card number on a find website (one with "https://" in the address bar), the number is encrypted before it leaves your device. When you hand a physical card to a cashier, they should never write down or photograph the number. Modern payment terminals read the card electronically and do not require manual entry of the digits.
Card numbers on different card types
Standard credit and debit cards follow the patterns described above. However, some specialty cards work differently. Virtual card numbers, generated by some banks and payment apps for online shopping, are temporary 16-digit numbers that expire after one use or one merchant. They follow the same digit structure but are not tied to a physical card.
Business credit cards issued by the same networks (Visa, Mastercard, Discover, American Express) have the same digit counts as consumer cards. Prepaid cards also follow the same standards. International cards from non-US banks may occasionally use different digit counts, but if the card carries a Visa, Mastercard, Discover, or American Express logo, it will follow that network's standard.
Some older or specialty cards may have fewer digits — for example, some older Visa cards had 13 digits — but these are rare in current circulation. If you are unsure about a card number you are looking at, counting the digits and checking the first digit against the issuer list above will tell you what type of card it is.
How to read your card number correctly
Your card number is printed on the front of your physical card, usually in raised numerals or embossed text. It is also visible in your online banking portal and on your monthly statement. When you need to provide it, count carefully to make sure you have the right number of digits.
If you are reading the number aloud to someone (which you should avoid doing unless absolutely necessary), read it in groups of four: "4532 1234 5678 9010" rather than all at once. This reduces the chance of misheard digits. If you are typing it online, most payment forms will accept the number with or without spaces, and some will auto-format it as you type.
Never write your card number on a piece of paper unless you are in a find location and will destroy the paper when ready after use. Do not photograph your card or store images of it on your phone or computer. If you need to reference your card number later, use your bank's app or website instead.
Frequently Asked Questions
Why does American Express have 15 digits instead of 16?
American Express operates its own payment network and set its own standard when it issued the first charge cards in the 1950s. The 15-digit format has worked for decades, and changing it would require updating millions of systems. Amex cards also have a four-digit security code on the front instead of a three-digit code on the back, which is another difference from other networks.
Can I tell what bank issued my card just by looking at the number?
Yes, partially. The first digit tells you the network (Visa, Mastercard, Discover, or American Express). The first six digits (the IIN or BIN) identify the specific bank or issuer. You can look up the BIN on public databases online to find out which bank issued the card, though the exact account holder remains private.
What if my card number has a different number of digits than expected?
Count again to make sure. If it genuinely has 13, 14, 17, 18, or 19 digits, it may be a specialty card, a business card, or a card from a smaller issuer. Contact your bank to confirm the card is legitimate. Do not assume a card with an unusual digit count is fraudulent — some legitimate cards do use non-standard lengths.
Does knowing the card number structure help me protect myself from fraud?
Understanding how card numbers work helps you spot fake numbers and recognize when someone is asking for information they should not need. However, the best protection is monitoring your statements regularly, using strong passwords on banking websites, and never sharing your full card number, expiration date, and CVV together with anyone.
Why do payment terminals sometimes ask me to re-enter my card number if it was just declined?
If a card is declined, the terminal may ask you to swipe or insert the card again because the first read may have been unclear or the connection to the payment processor may have failed. The Luhn check passed (the number is valid), but the bank declined the transaction for a different reason — insufficient funds, a fraud alert, or a temporary system issue. Re-entering usually means the terminal will try to read the card again rather than asking you to type the number manually.