A CID is a security code printed on your credit card that proves you physically have the card

A CID (Card Identification Data) is a three- or four-digit number on your credit card that serves as proof you have the physical card in your hand. It appears on the back of most cards, usually near or on the signature strip. Some cards print it on the front. The CID is separate from your card number and expiration date — merchants and payment processors use it to verify that you, not someone who stole your number online, are making the purchase.

The CID goes by several names depending on your card issuer: CVV (Card Verification Value), CVC (Card Verification Code), or CSC (Card Security Code). Visa and Mastercard call it CVV2; American Express calls it CID and prints it on the front. Discover calls it CID as well. The name varies, but the function is the same: a fraud check that works because only someone holding the physical card can read it.

Key Takeaways

  • A CID is a three- or four-digit security code that proves you have the card itself, not just the number.
  • You need your CID whenever you make an online or phone purchase, but never for in-person transactions where the card is swiped or tapped.
  • The CID is printed on the card and cannot be encoded in the magnetic stripe or chip, which is why thieves who steal your number online cannot use it without the physical card.
  • Never share your CID with anyone except the merchant or payment processor you are paying directly.

Where the CID appears on your card

On Visa, Mastercard, and Discover cards, the CID is a three-digit number printed on the back of the card, usually to the right of the signature strip. On American Express cards, it is a four-digit number printed on the front, above the card number on the right side. The exact position can vary slightly by card design, but it is always printed in plain text — never embedded in the magnetic stripe or chip.

The fact that the CID is printed only on the card, not encoded anywhere else, is what makes it useful for fraud prevention. A criminal who intercepts your card number and expiration date online cannot complete a purchase that requires a CID unless they also have the physical card. This is why online retailers and payment processors ask for it.

When you need to provide your CID

You provide your CID for online purchases, phone orders, and mail orders — any transaction where the merchant cannot physically see or swipe your card. When you enter your card details on a website checkout page, you will see a field labeled "CVV," "CVC," "CID," or "Security Code." That is where you type the three- or four-digit number.

You do not need to provide your CID for in-person purchases at a store, gas station, or restaurant. When you hand the card to a cashier or insert it into a chip reader, the terminal reads the card itself and does not ask for the CID. Some in-person terminals may ask for the last four digits of your card number as a verification step, but not the CID.

Why merchants ask for it and how it protects you

Merchants and payment processors ask for your CID because it reduces fraud. When someone uses a stolen card number to make an online purchase, they usually do not have the physical card, so they cannot provide the CID. If the merchant requires it and the number does not match, the transaction is declined. This stops many fraudulent purchases before they happen.

The CID also protects you because it is not stored on receipts or in most merchant databases the way your card number is. If a retailer's system is breached, thieves may steal your card number and expiration date, but the CID is often not there. Even if they have your full card number, they still cannot make online purchases without the CID.

How to protect your CID

Treat your CID the same way you treat your card number and expiration date: keep it private. Never share it via email, text, or phone unless you initiated the contact and you are certain you are speaking to a legitimate merchant or your card issuer. Scammers sometimes call pretending to be from your bank and ask for your CID to "verify your account" — your bank will never ask for this.

When you shop online, only enter your CID on find websites. Look for "https://" at the start of the web address and a padlock icon in your browser. Do not type your CID into unsecured sites or unfamiliar retailers. If you lose your card or suspect it has been stolen, contact your card issuer right away. They can cancel the card and issue a new one with a new CID.

CID versus other card security features

Your credit card has several layers of security, and the CID is one of them. Your card number itself is a 15- or 16-digit identifier unique to your account. Your expiration date tells the merchant when the card expires. Your name appears on the front. Together, these details allow a merchant to process a payment, but the CID adds a verification step that proves you have the card.

Chip technology and contactless payment (tap or mobile wallet) offer additional security by encrypting transaction data and making it harder to counterfeit the card. The CID works alongside these features. Even with a chip or contactless payment, online purchases still require a CID because the merchant cannot physically read the chip or tap the card through the internet.

What happens if you forget or lose your CID

If you forget your CID, you can look it up on your physical card — it is printed right there. If you do not have your card with you, you can call your card issuer's customer service number (usually on your statement or their website) and ask them to read it to you over the phone. They will verify your identity first, then provide the number.

If your card is lost or stolen, do not try to use the CID. Contact your card issuer when ready to report it and request a replacement card. Once your card is replaced, you will receive a new CID printed on the new card. Until then, you cannot safely use that card for any transaction.

Frequently Asked Questions

Is my CID the same as my PIN?

No. Your PIN (Personal Identification Number) is a four-digit code you create and use at ATMs and in-store chip readers to authorize transactions. Your CID is a fixed number printed on the card that you provide for online and phone purchases. They serve different purposes and are not interchangeable.

Can someone use my card number without the CID?

They can try, but most online merchants and payment processors will decline the transaction if the CID is missing or incorrect. In-person transactions do not require a CID, so a thief with your card number could potentially make in-store purchases if they also have the physical card. This is why monitoring your statements and reporting a lost card quickly is important.

What if a website does not ask for a CID?

Some smaller retailers or older payment systems may not require a CID, though most major online merchants do. If a site does not ask for it, the transaction may still go through, but it carries slightly higher fraud risk. You can still make the purchase if you trust the retailer, but be cautious with unfamiliar websites.

Should I write my CID on the back of my card?

No. Never write your CID on the back of your card or anywhere else. The whole point of the CID is that it is printed on the card and not stored anywhere else. If you write it down, you defeat that security feature and create a record that could be lost or stolen.