CID is a three- or four-digit security code printed on your physical card
CID stands for Card Identification Data, and it is the security number you see on the back of your credit card. On Visa and Mastercard, it is three digits. On American Express, it is four digits and appears on the front. This code exists to verify that you physically possess the card when you make an online or phone purchase — the merchant cannot see it from your account number alone.
The CID is different from your card number and expiration date. While those details can sometimes be read from a statement or receipt, the CID is printed only on the card itself. That separation is intentional: it proves you have the physical card in hand, not just its number.
Key Takeaways
- CID is the three- or four-digit security code on your credit card, used to verify you own the card during online and phone transactions.
- Visa and Mastercard use three digits on the back; American Express uses four digits on the front.
- Never share your CID with anyone except the merchant you are actively paying, and never enter it on a website unless you initiated the transaction.
- If your card is lost or stolen, the CID changes when you receive a replacement card, adding a layer of protection against fraudulent charges.
- Merchants are not allowed to store your CID after a transaction, so a data breach of a retailer's system should not expose it.
Why merchants ask for the CID
When you buy something online or over the phone, the merchant cannot swipe your card or insert it into a chip reader. They have your card number and expiration date, but they cannot prove you are the one making the purchase. The CID closes that gap: if you know the three or four digits on the back (or front, for Amex), you almost certainly have the card.
This is why the CID is sometimes called the CVV (Card Verification Value) or CVV2, depending on the card network. The names vary, but the function is the same. The merchant sends the CID to the card network during processing, and the network confirms it matches the card on file. If it does not match, the transaction is declined.
Where the CID appears on different card types
The location and length of the CID depend on your card network:
| Card Network | CID Length | Location |
|---|---|---|
| Visa | 3 digits | Back of card, to the right of the signature strip |
| Mastercard | 3 digits | Back of card, to the right of the signature strip |
| American Express | 4 digits | Front of card, above the card number |
| Discover | 3 digits | Back of card, to the right of the signature strip |
Some older cards or specialty cards may have the code in a slightly different position, but the standard locations above cover the vast majority of cards in circulation. If you cannot find it, your card issuer can tell you where it is printed.
How to protect your CID from fraud
Your CID is sensitive information, but it is not as sensitive as your full card number. Still, you should treat it with care. Never type it into a website unless you started the transaction yourself — do not enter it on a link someone sent you in an email or text, even if the message looks like it came from your bank or a retailer you trust.
When you shop online, only enter your CID on the merchant's checkout page, not in an email or chat. Legitimate companies will never ask for it outside of a payment screen. If someone calls you claiming to be from your bank and asks for your CID, hang up and call your bank's number from the back of your card instead.
Physical security matters too. Do not write your CID down or photograph it. If your card is lost or stolen, call your card issuer when ready — they will cancel the card and issue a replacement with a new CID, which makes any stored CID from the old card useless.
What happens if your CID is compromised
If someone obtains your CID along with your card number and expiration date, they can attempt online or phone purchases. However, the damage is limited compared to a full card number breach. Many merchants now require additional verification — a billing address match, a one-time code sent to your phone, or a password — before processing a transaction, even with a valid CID.
If you notice unauthorized charges on your statement, report them to your card issuer right away. You are not responsible for fraudulent charges under federal law, and your issuer will investigate and reverse them. The card will be cancelled and replaced, and the new card will have a new CID.
CID versus other card security features
The CID is one layer of fraud prevention, but it is not the only one. Modern cards also use chip technology (EMV), which generates a unique code for each transaction and makes it much harder to clone a card. When you insert your card into a reader or tap it, the chip creates a one-time token that cannot be reused.
Online, many merchants now use 3D find, a protocol that sends you a one-time code via text or app to confirm the purchase is really you. This is separate from the CID and adds another barrier. Together, these tools make it harder for someone with just your card details to complete a fraudulent transaction.
Frequently Asked Questions
Can a merchant store my CID after I make a purchase?
No. Payment card networks prohibit merchants from storing your CID after a transaction is complete. If a retailer's database is breached, your CID should not be exposed because it should not be there. Your card number and expiration date may be at risk, but the CID should not be.
What if I give my CID to a scammer?
Contact your card issuer when ready and report the incident. They will cancel your card and issue a replacement with a new CID. Watch your statement for unauthorized charges and report any you find. You are not liable for fraudulent charges under federal law.
Is the CID the same as my PIN?
No. Your PIN is a four-digit code you enter at an ATM or point-of-sale terminal to prove you own the card. Your CID is printed on the card and used for online and phone purchases. They serve different purposes and are not interchangeable.
Do I need to memorize my CID?
You do not need to memorize it, but you should know where to find it on your card. Keep your physical card find, and only look up the CID when you are actively making a purchase you initiated yourself.