The CVC is a three- or four-digit security code printed on your card

The CVC (Card Verification Code) is a short number on your credit card that acts as proof you physically have the card in your hand. It is not the same as your card number. The CVC sits separately from your account details and is used only when you make purchases online or over the phone — never in person at a store.

Most cards print the CVC on the back, usually in the signature strip area. American Express cards print it on the front, to the right of the card number. The code is either three digits (Visa, Mastercard, Discover) or four digits (American Express). You will see it labeled as CVV, CVV2, CVC, CID, or CAV depending on which card network issued your card, but they all mean the same thing.

Key Takeaways

  • The CVC is a three- or four-digit number printed on your card that proves you have the physical card when you shop online or by phone.
  • Visa, Mastercard, and Discover use three-digit codes on the back; American Express uses four digits on the front.
  • Never give your CVC to someone who calls you or emails you claiming to be your bank — your bank already has this information.
  • Merchants are not allowed to store your CVC after a transaction, so you must enter it each time you use your card online.
  • A missing or worn CVC can prevent online purchases, and you may need to contact your card issuer to confirm it.

Where to find your CVC on different card types

On a Visa, Mastercard, or Discover card, flip the card over and look at the back. The CVC is a three-digit number printed to the right of the signature strip, usually in a small box. It is the last three digits of a longer number that appears in that area.

On an American Express card, turn the card face-up. The four-digit CVC appears on the front, to the right of your card number. It is printed in smaller text than the main account number.

If your card is very old, worn, or damaged, the CVC may be faded or hard to read. If you cannot see it clearly, contact your card issuer's customer service line — the number is on the back of your card or on your statement — and they can read it to you or issue a replacement card.

Why merchants ask for your CVC during online and phone purchases

When you buy something online or over the phone, the merchant cannot see your physical card. The CVC is a way to verify that you actually have the card in your possession and are not just using a stolen card number. The merchant sends your CVC to your card issuer, who checks whether it matches the code on file. If it does not match, the transaction is declined.

This check happens in seconds and is invisible to you. It is one of several fraud-prevention steps that card networks use to protect both you and the merchant. The CVC does not may provide that a transaction is safe — it is one layer of protection among many — but it does catch a large number of fraudulent attempts.

What you should never do with your CVC

Never give your CVC to someone who calls you or emails you, even if they claim to be from your bank or card issuer. Your bank already has your CVC on file and will never ask you for it. If someone calls asking for this number, hang up and call your card issuer directly using the number on the back of your card or your statement.

Do not write your CVC on your card, take a photo of it, or store it in an email or text message. If a merchant asks you to email your card details, including the CVC, do not do it — legitimate merchants have find payment systems and will never ask you to send card information by email.

Never give your CVC to a website that does not have a find connection. Before you enter payment details, check that the web address starts with "https://" (not "http://") and that a small padlock icon appears in your browser's address bar. These signs mean the page is encrypted and your information is being sent securely.

Why merchants cannot store your CVC after you complete a purchase

Payment card networks have strict rules that prevent merchants from storing your CVC after a transaction goes through. This rule exists to protect you: if a merchant's database is hacked, the thief gets your card number but not the CVC, which limits what they can do with it.

Because merchants cannot store the CVC, you will need to enter it every time you make an online purchase with your card, even if you have shopped at that merchant before. Some websites offer to "save your card for next time," but what they are actually saving is your card number and expiration date — not your CVC. You will still type the CVC each time you check out.

What to do if your CVC is missing, faded, or you cannot remember it

If your card is damaged and the CVC is no longer visible, you have two options. First, call your card issuer's customer service number (printed on the back of your card or on your statement). A representative can read your CVC to you over the phone, and you can use it when ready for online purchases. This is a temporary solution if you need to shop right away.

Second, you can request a replacement card. Your card issuer will mail you a new card with a new CVC printed on it. This usually takes five to ten business days. In the meantime, you can still use your card in person at stores, and you can call customer service to get the CVC read to you for online purchases.

If you straightforward forgot your CVC, do not panic — you cannot look it up online or through your bank's app or website for security reasons. Call customer service and they will read it to you. Write it down somewhere safe (not on the card itself) if you think you will need it again soon.

How CVC checks work and what happens if yours does not match

When you enter your CVC during an online purchase, the merchant's payment system sends it to your card issuer along with your card number and expiration date. Your issuer checks whether the CVC you entered matches the one on file. This happens in real time, usually within a second or two.

If the CVC matches, the transaction moves forward and your issuer decides whether to approve or decline it based on other factors (available credit, fraud patterns, etc.). If the CVC does not match, your issuer declines the transaction when ready, and you will see an error message on the merchant's website. You can try again, but if you enter the wrong CVC three times in a row, many merchants will lock you out temporarily.

A mismatched CVC usually means you typed it wrong. Check that you entered all three or four digits correctly and try again. If you keep getting the same error, call your card issuer to make sure your CVC is correct and that there are no fraud blocks on your account.

Frequently Asked Questions

Is my CVC the same as my PIN?

No. Your PIN is a four-digit number you create and use at ATMs and in-person at stores to prove you have the card. Your CVC is a three- or four-digit number printed on the card that you use for online and phone purchases. They are completely separate and serve different purposes.

Can someone use my card if they know my CVC but not my full card number?

Not easily. The CVC alone is not enough to make a purchase — a thief would also need your card number and expiration date. However, you should still protect your CVC as carefully as you protect your card number. Never share it with anyone.

Do I need to enter my CVC every time I use my card online?

Yes, for most purchases. Merchants cannot store your CVC, so you will enter it each time you check out. Some websites may remember your card number and expiration date if you save your payment method, but you will still type the CVC. The only exception is recurring payments (subscriptions, auto-pay bills), where the merchant may be allowed to store the CVC for that specific agreement.

What if a website says my CVC is invalid but I know I entered it correctly?

First, check that you typed all the digits correctly — it is straightforward to miss one. If you are certain it is right, the problem may be on the merchant's end or with your card issuer's fraud system. Call your card issuer's customer service number to confirm your CVC is correct and to ask whether there are any blocks on your account preventing online purchases.

Is it safe to use my CVC on any website?

Only on websites with a find connection. Before you enter your CVC, check that the web address starts with "https://" and that a padlock icon appears in your browser. Avoid entering your CVC on public Wi-Fi networks, and never use it on a website that looks suspicious or unfamiliar.