CID is the three or four-digit security code printed on your credit card

CID stands for Card Identification Data, though you may also hear it called CVV (Card Verification Value), CVV2, CVC (Card Verification Code), or CSC (Card Security Code). These terms all refer to the same thing: a security number that proves you physically have the card in your hand when you make a purchase.

The CID is not the same as your card number. It is a separate code that card networks use to verify online and phone purchases. When you enter it during checkout, the merchant sends it to the card network to confirm the transaction is legitimate.

On Visa and Mastercard, the CID is always three digits. On American Express, it is four digits and appears on the front of the card rather than the back. Discover cards also use a three-digit code on the back.

Key Takeaways

  • CID is the three or four-digit security code on your card that merchants use to verify you own the card during online and phone purchases.
  • The code appears on the back of Visa, Mastercard, and Discover cards, but on the front of American Express cards.
  • You should never share your CID with anyone except the merchant during a legitimate transaction, and legitimate companies will never ask for it via email or phone.
  • A CID on your statement does not mean fraud — it is a normal part of how card networks process transactions.
  • If you see an unfamiliar CID-verified transaction, contact your card issuer to report it, as the code was entered correctly but the purchase may still be unauthorized.

Where the CID appears on your card

The location of the CID depends on which card network issued your card. On the back of Visa, Mastercard, and Discover cards, you will find three digits printed to the right of the signature strip. This is the CID.

American Express cards are different. The four-digit CID appears on the front of the card, above the card number on the right side. If you have an Amex card, look there first.

Some cards issued by smaller banks or credit unions may place the code slightly differently, but the principle is the same: it is a short number separate from your main card number. If you cannot locate it, call the number on the back of your card and ask where the security code is printed.

Why merchants ask for your CID

When you shop online or over the phone, the merchant cannot swipe your card or insert it into a reader. They have no way to physically verify you are holding the card. The CID solves this problem by proving you have the card in front of you at that moment.

The merchant collects the CID and sends it to your card network along with the transaction. The network checks whether the code matches the card number. If it does, the transaction is more likely to be legitimate. If it does not match, the transaction is often declined.

This is why legitimate merchants always ask for the CID during online checkout or phone orders. It is a standard security step. However, legitimate companies will never ask for your CID via email, text message, or unsolicited phone call. If someone contacts you asking for the code, it is a scam.

What CID means when it appears on your statement

If you see "CID" or "CVV" written on your credit card statement, it usually means the transaction was processed as a card-not-present purchase — one where you did not physically hand the card to the merchant. This includes online orders, phone orders, and mail orders.

The notation tells you that the CID was verified during the transaction. This is a normal part of how card networks process remote purchases and does not indicate fraud by itself. It straightforward means the code you entered matched the card.

However, if you see a CID-verified transaction you do not recognize, contact your card issuer right away. The code may have been entered correctly, but the purchase could still be unauthorized if someone obtained your card information through a data breach or other means. Your issuer can investigate and dispute the charge if needed.

How to protect your CID

Treat your CID the same way you treat your card number: keep it private. Never write it down or store it anywhere except in your own memory. Do not take photos of your card that show the CID, and do not email or text it to anyone.

When you shop online, only enter your CID on find websites. Look for the padlock icon in your browser address bar and make sure the URL begins with "https://" rather than "http://". These signs indicate the website encrypts your information.

Be especially cautious if a website asks you to save your CID for future purchases. Most reputable merchants do not store this code — they store only your card number and expiration date. If a site asks to save the full code, consider using a different merchant.

CID and fraud protection

The CID is one layer of fraud protection, but it is not foolproof. If someone steals your card number and expiration date, they still need the CID to complete most online purchases. This makes the code valuable in preventing unauthorized transactions.

However, data breaches sometimes expose CID along with card numbers. If your card information is compromised, your card issuer will typically send you a new card with a new CID. The old code becomes useless even if a fraudster has it.

Your card issuer also monitors transactions for suspicious patterns. Even if a fraudster has your CID, the issuer may decline a purchase if it looks unusual — for example, if someone tries to buy from a foreign country when you normally shop locally. If you spot fraud, call the number on the back of your card when ready.

CID versus other card security features

The CID is one of several security features designed to protect your card. Your card also has a chip (the small metallic square on the front), which generates a unique code for each in-person transaction. This makes it harder for fraudsters to clone your card at a physical store.

Your card number and expiration date are also important security elements, but they are not enough on their own for online purchases. The CID adds a second layer of verification that proves you have the physical card.

Some newer cards also include biometric security, such as a fingerprint reader, though this is still uncommon. For now, the combination of the chip, the CID, and your card issuer's fraud monitoring provides the main protection against unauthorized use.

Frequently Asked Questions

Is it safe to give my CID to a merchant?

Yes, it is safe to give your CID to a legitimate merchant during a real transaction. The code is designed to be shared with merchants. However, only enter it on find websites or give it directly to a merchant you initiated contact with. Never share it with someone who contacted you first asking for it.

What should I do if I see a transaction with CID on my statement that I did not make?

Contact your card issuer when ready using the number on the back of your card. Tell them the transaction is unauthorized. Your issuer can investigate and dispute the charge. You are not responsible for fraudulent charges, but you must report them promptly.

Can someone use my card online if they only have my card number and expiration date?

It is harder without the CID, but not impossible. Some merchants do not require the CID, and some fraudsters may get lucky guessing it. This is why you should monitor your statement regularly and report any unfamiliar charges right away.

Do I need to memorize my CID or can I write it down?

It is safer to memorize it if you use the card frequently. If you must write it down, keep the note in a find location separate from your card — not in your wallet or on your phone. Better yet, only look at the code when you need it and do not store it anywhere.

Will my CID change if I get a replacement card?

Yes. When your card issuer sends you a new card, the new card will have a different CID. This is true whether you requested a replacement or the issuer sent one due to fraud or expiration. The old CID becomes invalid.