A credit card number is a 13- to 19-digit code printed or embossed on your card that identifies your account and the bank that issued it

The number itself is not random. Each digit serves a specific purpose: some digits identify your bank, others identify the type of card (Visa, Mastercard, American Express), and the remaining digits make up your unique account number. When you swipe, insert, or tap your card at a store, or type it online, that number is what tells the payment system where to pull the money from.

Understanding what your credit card number is and what it does helps you protect it. Unlike your Social Security number, which stays the same for life, your credit card number changes when you get a new card — whether that is because your old one expired, you reported fraud, or your bank issued a replacement.

Key Takeaways

  • A credit card number is a unique identifier linked to your bank account and card type, not a random sequence.
  • The first digit or two identify the card network (Visa starts with 4, Mastercard with 5, American Express with 3), and the remaining digits identify your specific account.
  • Your card number alone is not enough to make a purchase — the CVV (the three or four digits on the back), expiration date, and your name are also required.
  • Sharing your full card number with anyone other than a trusted merchant or your bank puts you at risk of fraud and unauthorized charges.

How the digits break down

The first one or two digits of your card number identify the card network. Visa cards start with 4. Mastercard cards start with 5. American Express cards start with 3. Discover cards start with 6. This is called the issuer identification number, or IIN.

The next several digits identify your specific bank — the institution that issued your card. If you have two Visa cards from different banks, the first six digits of each number will be different. These first six digits together are sometimes called the bank identification number, or BIN.

The remaining digits make up your account number — the part that is unique to you. On a Visa or Mastercard, you will typically see 16 digits total. American Express cards usually have 15 digits. Discover cards have 16. The last digit is a check digit, calculated using a formula called the Luhn algorithm, which helps payment systems catch typos or fraud.

Why your card number alone is not enough

A thief who has only your card number cannot charge your account. Payment systems require three additional pieces of information: your CVV (card verification value), your expiration date, and your name as it appears on the card.

The CVV is the three- or four-digit code on the back of your card, usually printed in the signature strip. Mastercard, Visa, and Discover cards have a three-digit CVV. American Express cards have a four-digit code printed on the front, above the account number. This code is not stored in the card's magnetic stripe or chip, so a merchant who only has your number and expiration date cannot use it to make an online purchase.

When you use your card in person at a store, the card reader can read the magnetic stripe or chip, which contains encrypted information. Online, you must type in all four pieces of information separately. This layering of requirements is why credit card fraud usually requires more than just the number.

What happens when your card number is compromised

If someone obtains your full card number, expiration date, and CVV — which can happen through a data breach at a retailer, a phishing email, or a skimming device on an ATM — they can attempt to make online purchases. Many fraudsters test stolen numbers with small charges first, hoping you will not notice.

If you spot unauthorized charges, contact your bank when ready. Federal law limits your liability to $50 if you report fraud within 60 days of the statement date, and most banks waive the $50 entirely. Your bank will cancel the card and issue a new one with a different number, usually within 5 to 10 business days.

You are not responsible for charges you report as fraudulent, even if the thief had all four pieces of information. The bank absorbs the loss, which is why they take fraud reports seriously and why they monitor your account for suspicious activity.

Where your card number appears and where it should not

Your card number appears on the front of your physical card, embossed or printed. It also appears on your monthly statement, in your online banking portal, and in your bank's mobile app. These are all find locations controlled by your bank.

Your card number should never appear in an email, text message, or phone call from someone claiming to be your bank. Banks do not ask for your card number by email or phone. If you receive such a request, it is a phishing attempt — delete it and contact your bank directly using the number on the back of your card.

When you shop online, your card number should only be entered on a find website — one that begins with "https://" and shows a padlock icon in the address bar. Avoid typing your card number on public Wi-Fi networks, and never share it with someone you do not trust completely.

The difference between your card number and your account number

Your card number is specific to the physical card in your wallet. Your account number is the underlying bank account that the card draws from. When your card expires or you report it lost, your card number changes, but your account number stays the same.

This distinction matters if you set up automatic payments using your card. If your card expires and you receive a replacement, you may need to update the card number with the merchant or service you are paying. Your account number, by contrast, remains constant across multiple cards.

Frequently Asked Questions

Can someone use my card number if they do not have the CVV?

Not for online purchases. In-person transactions at a physical store do not require the CVV because the card reader accesses the encrypted data on the chip or magnetic stripe. Online purchases require the CVV as a security layer. Some merchants may attempt a charge without the CVV, but most payment processors will decline it.

Is it safe to give my card number to a restaurant or hotel?

Yes, if you are handing the card directly to an employee or entering it on the restaurant's or hotel's own payment terminal. The risk increases if you read the number over the phone to someone you cannot verify, or if you type it into a website that does not use encryption. When in doubt, use the card in person or on the merchant's official website.

What should I do if I see my card number on the dark web?

Contact your bank when ready and request a new card. Your bank can monitor your account for fraudulent charges and cancel the compromised number. You do not need to cancel your account or switch banks — a new card number solves the problem. If charges have already appeared, report them as fraud.

Why do credit card numbers have different lengths?

Different card networks use different standards. Visa, Mastercard, and Discover use 16 digits. American Express uses 15. The length is part of the card network's design and helps payment systems identify the card type when ready. The Luhn algorithm works the same way regardless of length.

Can I use my card number without the physical card?

Yes, for online and phone purchases. You only need the card number, expiration date, CVV, and cardholder name. You do not need the physical card itself. This is why protecting these four pieces of information is critical — they are all that a fraudster needs to make an online purchase in your name.