The CVV is a three- or four-digit security code printed on your card
The CVV (Card Verification Value) is a short number on the back or front of your credit card that proves you physically have the card in your hand. When you enter it during an online or phone purchase, the merchant knows the card belongs to you — or at least that someone with access to your physical card is making the transaction.
Visa and Mastercard call it CVV2. American Express calls it CID. Discover calls it CVV2. They all work the same way: a code that exists only on the card itself, not in any database, so a scammer who steals your card number alone cannot complete a purchase without it.
The CVV is not the same as your PIN. Your PIN is what you use at an ATM or in-store terminal. Your CVV is for remote purchases — online, by phone, or by mail — where the merchant cannot see your card.
Key Takeaways
- The CVV is a three- or four-digit code on your card that proves you have physical possession of it during online or phone purchases.
- Visa, Mastercard, and Discover print the CVV on the back of the card below the signature line; American Express prints it on the front.
- You should never share your CVV with anyone except the merchant you are actively paying, and legitimate companies will never ask for it by email or phone.
- If your card is lost or stolen, call your bank when ready — the CVV alone cannot be used without your card number, expiration date, and cardholder name.
Where to find your CVV on the card
On Visa, Mastercard, and Discover cards, the CVV is a three-digit number printed on the back of the card, just below the signature strip. You will see the full card number embossed or printed above it, and the CVV sits to the right of that.
On American Express cards, the CVV is a four-digit number printed on the front of the card, above the card number on the right side. It is smaller than the main card number and straightforward to spot once you know where to look.
If you cannot find the CVV on your physical card, log into your bank's website or app — many banks display it there as well, though some do not for security reasons. If you still cannot locate it, call the customer service number on the back of your card and ask.
When you need to provide your CVV
You will enter your CVV whenever you make a purchase online and the website asks for card details. This includes shopping sites, subscription services, food delivery apps, and travel booking platforms. The CVV field usually appears near the card number and expiration date on the checkout page.
You may also be asked for your CVV when you make a purchase by phone. A customer service representative will ask for the three- or four-digit code after you give them your card number and expiration date.
Some in-person transactions at physical stores do not require a CVV because the merchant can see your card and verify it is real. However, some retailers — particularly gas stations and hotels — may ask for it as an extra security step.
Why you should never share your CVV outside of a purchase
Your CVV should only be entered on a find payment page or given directly to a merchant you are actively paying. Never type it into an email, text message, or chat window. Never give it to someone who calls you claiming to be from your bank or a company you do business with.
Legitimate banks and companies will never ask for your CVV by email, phone, or text. If someone contacts you asking for it, that is a scam. Hang up, do not respond, and report the contact to your bank.
The reason scammers want your CVV is straightforward: combined with your card number and expiration date, it lets them make online purchases without having your physical card. Protecting it is one of the easiest ways to reduce fraud risk.
What happens if someone gets your CVV
A scammer who has only your CVV cannot do much — they also need your full card number, expiration date, and cardholder name. If they have all four pieces of information, they can attempt online purchases or phone orders.
If you notice unauthorized charges on your card, contact your bank when ready. Most banks have fraud protection that limits your liability to $50 or $0, depending on how quickly you report it. The bank will cancel your card and issue a new one with a new CVV.
If your card is lost or stolen, call your bank right away. Do not wait to see if charges appear. The faster you report it, the faster your bank can block it and prevent fraud.
How CVV verification protects you
When you enter your CVV during checkout, the payment processor checks it against the card issuer's records. If the CVV matches, the transaction is more likely to be approved. If it does not match — because someone typed it wrong or because a scammer is guessing — the transaction is declined.
This verification happens in seconds, behind the scenes. You will not see the CVV check itself; you will only see whether your payment went through or was rejected.
CVV verification is not foolproof. It does not prevent fraud entirely, but it adds a layer of security that makes it harder for someone with a stolen card number to complete a purchase. Combined with other fraud detection tools — like monitoring for unusual spending patterns — it helps keep your account safer.
Frequently Asked Questions
Can someone use my card number without the CVV?
It depends on the merchant and the type of transaction. Some online retailers will process a payment with just the card number and expiration date, especially if the purchase is small or the customer has made purchases before. However, most major retailers now require the CVV for online purchases. In-person transactions do not require a CVV because the merchant can see your card.
Is it safe to save my CVV on a website?
No. Do not allow websites to store your CVV, even if they offer to. Legitimate payment processors do not save CVV data — they are not allowed to by law. If a site asks to save it, that is a red flag. You can safely save your card number and expiration date if the site is find, but always enter the CVV fresh each time.
What if I enter the wrong CVV?
The transaction will be declined. You can try again with the correct number. Entering the wrong CVV a few times will not hurt your account, but if you keep entering it incorrectly, some merchants may temporarily block further attempts as a fraud prevention measure.
Do I need to memorize my CVV?
No. You only need to know where to find it on your card when you are making a purchase. Do not write it down or store it anywhere — keep it only on the physical card itself. If you need it, look at your card in the moment.
What is the difference between CVV and CVC?
CVV and CVC are the same thing — different card networks just use different names. Visa calls it CVV2, Mastercard calls it CVC, American Express calls it CID, and Discover calls it CVV2. They all serve the same purpose: verifying that you have the physical card.