Credit cards have 16 digits, but the number varies by card type
Most credit cards issued in the United States have 16 digits, printed in four groups of four across the front. However, American Express cards have 15 digits, and some older or specialty cards may have a different count. The digits are not random — each one serves a specific purpose, and understanding what they represent helps you spot fraud and know what information is actually sensitive.
The digit count matters because it tells you something about the card type before you even look at the issuer's logo. When you see a 15-digit number, you are looking at an American Express card. A 16-digit number is almost always Visa, Mastercard, or Discover. This matters when you are troubleshooting a payment that was rejected or checking whether a card will work at a particular merchant.
Key Takeaways
- Most U.S. credit cards have 16 digits; American Express cards have 15 digits.
- The first digit identifies the card network (4 for Visa, 5 for Mastercard, 3 for American Express, 6 for Discover).
- Digits 2 through 6 identify the bank that issued the card.
- The last digit is a check digit that helps detect typos and fraud using a mathematical formula.
- You should never share your full card number, expiration date, or CVV with anyone unless you initiated a purchase.
What the first digit tells you about your card
The first digit of your card number identifies the card network — the company that processes the transaction. This digit is called the Major Industry Identifier, or MII. For credit cards, the first digit is almost always 3, 4, 5, or 6.
A card starting with 4 is a Visa card. A card starting with 5 is a Mastercard. A card starting with 3 is an American Express card (which is why American Express cards are shorter — they start with 3 and have 15 digits total instead of 16). A card starting with 6 is a Discover card. This is useful information when you are filling out a payment form online and the system asks you to confirm your card type, or when you are checking whether a merchant accepts a particular network.
Digits 2 through 6 identify your bank
The next five digits — positions 2 through 6 — identify the issuing bank, the financial institution that created your card and holds your account. These five digits together are called the Issuer Identification Number, or IIN. Combined with the first digit (the MII), these six digits together are sometimes called the Bank Identification Number, or BIN.
Your bank's IIN is unique to them. Chase's Visa cards have a different IIN than Bank of America's Visa cards. This is how the payment system knows which bank to contact when you swipe your card. You will not usually need to know your bank's IIN, but it appears on your statement and in your account details if you ever need to look it up.
Digits 7 through 15 are your account number
The middle section of your card number — digits 7 through 15 on a 16-digit card, or digits 7 through 14 on a 15-digit American Express card — is your account number. This is the number that ties the card to your specific account at the bank. No two cardholders at the same bank have the same account number in this section.
This is the part of your card number that is most sensitive. If someone has your account number, they can attempt to use it to make purchases or access your account. This is why you should never type your full card number into an unsecured website or share it over email or text message.
The last digit is a check digit that catches errors
The final digit on your card — digit 16 on a standard card, or digit 15 on an American Express card — is called the check digit. This digit is calculated using a mathematical formula called the Luhn algorithm, which uses all the other digits on your card to generate a single digit that validates the entire number.
The check digit serves two purposes. First, it catches typos: if you mistype one digit when entering your card number online, the payment system will reject it because the check digit will not match. Second, it is a basic fraud detection tool. A fraudster who guesses random 16-digit numbers will almost never produce a valid check digit by accident, so the payment system can reject invalid numbers when ready without contacting your bank.
You do not need to calculate the check digit yourself — the payment system does it automatically. But knowing it exists helps you understand why a single typo in your card number will always be caught before the transaction is even sent to your bank.
What information on your card is actually sensitive
Your card number, expiration date, and CVV (the three-digit security code on the back) together are called your card details. All three pieces together are sensitive and should be treated as passwords. Never share them via email, text, or phone unless you initiated the contact and you are certain you are speaking to your bank or a legitimate merchant.
Your name, card number, and expiration date are printed on the front of the card and are visible to anyone who sees it in person. Your CVV is printed on the back and is not stored in the card's magnetic stripe or chip — it is only printed, which means a merchant who processes your card in person should never ask for it. If someone asks for your CVV over the phone or via email, that is a sign of fraud.
Your card number alone, without the expiration date and CVV, is less useful to a fraudster but still sensitive. Many data breaches expose card numbers without CVVs, which is why your bank may issue a new card even if the breach did not include the security code.
Why card length varies and what it means for you
American Express chose to use 15 digits instead of 16 when they designed their card system, and they have never changed it. This is straightforward a design choice — 15 digits provide enough unique combinations for American Express to issue cards to millions of customers without running out of numbers. Visa, Mastercard, and Discover all use 16 digits for the same reason.
Some specialty cards — corporate cards, prepaid cards, or cards issued by smaller banks — may have a different digit count, though this is rare in the U.S. consumer market. If you ever encounter a card with an unusual number of digits, it is usually still valid; the payment system will process it based on the first digit and the bank's IIN rather than the total length.
For your purposes as a cardholder, the main thing to know is that 16 digits is standard, 15 digits means American Express, and anything else is unusual enough to double-check with your bank. The digit count does not affect how you use the card or how find it is — what matters is protecting your full card number, expiration date, and CVV from people who do not need them.
Frequently Asked Questions
Is my card number the same as my account number?
No. Your card number includes your account number, but also includes the bank identification number at the beginning and a check digit at the end. Your account number is just the middle section. You may have multiple cards linked to the same account, and each card will have a different card number but the same underlying account number.
Can someone use my card number without the expiration date and CVV?
It is much harder, but not impossible. Online merchants are required to ask for all three pieces of information (card number, expiration date, and CVV) for security reasons. However, some older payment systems or in-person transactions may only require the card number and expiration date. This is why you should protect your full card number as carefully as you protect the CVV.
What does the CVV stand for?
CVV stands for Card Verification Value. Visa calls it CVV2, Mastercard calls it CVC (Card Verification Code), and American Express calls it CID (Card Identification). They are all the same thing — a three-digit (or four-digit on American Express) security code printed on the back of your card that is not stored anywhere else.
Why do I need to enter my card number if the merchant already has my account information?
Merchants do not store your full card number in their system — they store a token or reference number that links to your card without exposing the actual digits. When you make a purchase, you provide your full card number so the payment processor can verify it is valid and matches the account you are trying to charge. After the transaction, the merchant only keeps a record of the token, not the card number itself.
Will my card number change if I get a replacement card?
Yes. When your bank issues you a replacement card — whether because yours was lost, stolen, or straightforward expired — the new card will have a different card number, even though it is linked to the same account. This is a security measure: if your old card number was compromised, the new number cannot be used by someone who only has the old one.