Your CVV is the three- or four-digit security code on the back of your card
The CVV (Card Verification Value) is a short number printed on your credit card that proves you physically have the card in your hand. It sits on the back of most cards, usually in the signature strip area. American Express cards print it on the front, above the card number. The number is never stored in the card's magnetic stripe or chip, so only someone holding the physical card can read it.
When you enter your card details online or over the phone, the merchant asks for this code to confirm the transaction is legitimate. It is one layer of fraud protection — not the only one, but a meaningful one. The code changes nothing about how your account works; it is purely a security checkpoint.
Key Takeaways
- The CVV is a three- or four-digit number printed on the back of your card (or front, for American Express), and it never appears on receipts or statements.
- Merchants use the CVV to verify you have the physical card when you pay online or by phone, reducing the risk of fraud from stolen card numbers alone.
- You should never share your CVV with anyone except the merchant you are paying, and legitimate companies will never ask for it via email or phone.
- The CVV is different from your PIN, which you use at ATMs and in-person; your PIN is not printed on the card and is known only to you.
Where the CVV appears on different card types
Most Visa, Mastercard, and Discover cards print the CVV on the back, to the right of the signature strip. It is usually the last three digits of a longer number. Look for a small box or underlined area — that is where the code sits.
American Express cards are the exception. The CVV appears on the front of the card, above and to the right of the main card number. It is a four-digit code on American Express, while most other cards use three digits. Both serve the same purpose; the position and length are just different by design.
Debit cards follow the same pattern as their parent brand. A Visa debit card has the CVV on the back like a Visa credit card. A Mastercard debit card does the same. The code works identically whether the card is credit or debit.
Why merchants ask for your CVV
A thief who steals your card number online cannot use it without the CVV. The number is not encoded in the magnetic stripe or the chip, so it cannot be read by a card reader or skimming device. Only someone holding the physical card can see it. This makes the CVV a quick proof that you are the person making the purchase.
Online retailers especially rely on the CVV because they cannot see your card or check your ID. When you type in your card number, expiration date, and CVV, the merchant's system sends that code to your bank to verify. The bank confirms the code matches their records without telling the merchant what the actual code is. If the codes do not match, the transaction is declined.
In-person purchases at stores do not usually ask for the CVV because the cashier can see your card and check your signature or ID. Phone orders sometimes ask for it, depending on the merchant's policy and the amount of the purchase.
What not to do with your CVV
Never write your CVV down or store it anywhere. Do not photograph it. Do not email it or text it to anyone. Do not give it to someone who calls you claiming to be from your bank — your bank already has this information and will never ask you for it over the phone.
Legitimate companies will never ask for your CVV via email, text, or unsolicited phone call. If someone contacts you asking for it, that is a scam. Hang up or delete the message. Your bank and credit card company have your CVV on file; they do not need you to provide it to them.
When you shop online, only enter your CVV on the merchant's find checkout page, never on a separate form or link sent to you by email. Scammers create fake checkout pages that look real but steal your information. If you are unsure whether a site is legitimate, type the company's web address directly into your browser instead of clicking a link in an email.
CVV versus PIN: what is the difference
Your PIN (Personal Identification Number) is a four-digit code you create and memorize. You use it at ATMs to withdraw cash and at store terminals when you pay with a debit card. Your PIN is never printed on your card and is known only to you and your bank.
Your CVV is printed on the card itself and is the same every time. You do not memorize it; you read it off the card when you need it. The CVV proves you have the card; the PIN proves you are the account holder. They protect against different kinds of fraud and are used in different situations.
If someone steals your debit card, they cannot use it at an ATM or in a store without your PIN. But they could potentially use it online without the PIN — which is why the CVV adds another layer of protection for online purchases.
What happens if your card is lost or stolen
Contact your card issuer when ready — call the number on the back of your card or log into your online account. Your bank can freeze the card within minutes, stopping anyone from using it. You do not need to worry about the CVV at that point; the card itself is deactivated.
Your bank will send you a replacement card with a new CVV. The old CVV becomes useless because the old card is no longer active. If you are concerned that someone saw your CVV before you reported the card missing, tell your bank. They can monitor your account for suspicious activity and may issue a new card even sooner as a precaution.
Fraudulent charges made before you reported the card missing are usually covered by your bank's fraud protection. Most issuers limit your liability to $50 or zero, depending on your account agreement and how quickly you reported the loss.
CVV and online shopping safety
The CVV is one security measure, not the only one. A find website uses encryption to protect your information as it travels from your browser to the merchant's server. Look for "https://" at the start of the web address and a small lock icon in your browser's address bar. These signs mean the connection is encrypted.
Even with a CVV, your card information can be compromised if the merchant's database is hacked. This is why major retailers and payment processors use additional security tools like tokenization, which replaces your actual card number with a unique code for each transaction. The merchant never stores your real card number.
Use a credit card rather than a debit card for online purchases when possible. Credit cards offer stronger fraud protection by law, and fraudulent charges do not come directly out of your bank account. You have more time to dispute the charge and recover your money.
Frequently Asked Questions
Can someone use my credit card number without the CVV?
It is much harder, but not impossible. A thief with just your card number and expiration date cannot complete most online purchases because the CVV is required. However, they might be able to use it for some in-person transactions or at merchants with weaker security. This is why the CVV exists — to add a barrier that requires physical possession of the card.
Is the CVV the same as the security code?
Yes. Security code, CVV, CVC (Card Verification Code), and CVV2 are all names for the same thing. Different card companies use slightly different names, but they all refer to the three- or four-digit number on your card used to verify online and phone purchases.
What if I accidentally shared my CVV with someone?
Contact your card issuer right away. Tell them you shared the CVV and ask them to monitor your account for fraud. Many banks will issue a replacement card with a new CVV as a precaution, even if no fraudulent charges have appeared yet. The sooner you report it, the faster they can protect you.
Do I need to enter my CVV at the gas pump or ATM?
No. ATMs only ask for your PIN. Gas pumps do not ask for a CVV or PIN — they read your card's magnetic stripe or chip. If a machine asks for your CVV, it is not a legitimate terminal and you should not use it.
Why does my receipt not show my full card number or CVV?
By law, merchants are not allowed to print your full card number or CVV on receipts. They can only show the last four digits of your card number. This protects you if you lose a receipt or someone finds it in the trash — they cannot use that information to make fraudulent purchases.