The CVV is the three- or four-digit security code printed on your credit card

The CVV (Card Verification Value) is a short number on your physical card that proves you have the card in your hands. It is not stored in the card's magnetic stripe or chip, so a thief who steals your card number alone cannot use it online. Visa and Mastercard call it the CVV; American Express calls it the CID; Discover calls it the CVC. They all serve the same purpose.

The CVV is one of several security layers built into credit cards. It sits between you and fraud — but only if you understand where it lives on your card and when you should and should not share it.

Key Takeaways

  • The CVV is a three-digit code on the back of Visa, Mastercard, and Discover cards, or a four-digit code on the front of American Express cards.
  • You need the CVV to complete online purchases and phone orders, but never for in-person transactions where the card is swiped or inserted.
  • Never share your CVV with anyone who calls you or emails you, even if they claim to be from your bank — legitimate companies never ask for it this way.
  • The CVV is printed on the card itself and cannot be changed, so if someone has seen it, contact your card issuer and request a replacement card.

Where the CVV appears on your card

On Visa, Mastercard, and Discover cards, the CVV is a three-digit number printed on the back of the card, to the right of the signature strip. It is the last three digits of a longer number that appears there. Look for it near the bottom right corner of the back.

On American Express cards, the CVV is a four-digit number printed on the front of the card, above the card number on the right side. It is smaller than the main card number and sits in its own space.

The CVV is always printed in a different color or font than the rest of the card to make it stand out. If you cannot find it, check the card issuer's website or call the number on the back of your card — they can tell you exactly where to look on your specific card design.

When you need to provide your CVV

You will need your CVV for any online purchase where you enter your card details into a website or app. This includes shopping, paying bills, making donations, or booking travel. The merchant's payment system asks for it as proof that you have the physical card.

You also need the CVV when you give your card number over the phone to a business — a hotel, airline, or mail-order company. The person taking your order will ask for it before processing the charge.

You do not need to provide your CVV when you swipe or insert your card at a store, gas pump, or ATM. The card reader communicates with your bank through the chip or magnetic stripe, and the CVV is not part of that exchange. If a cashier or attendant asks for your CVV in person, that is a sign something is wrong — do not provide it.

Why merchants ask for the CVV

The CVV exists because it is not stored anywhere except on the physical card itself. A criminal who steals your card number from a data breach or a skimming device cannot use that number alone to make an online purchase or phone order — they would also need the CVV, which they do not have.

When you provide the CVV to a legitimate merchant, that merchant sends it to your card issuer's system to verify that you have the card. The issuer checks that the CVV matches the card number, and if it does, the transaction is approved. The merchant does not store the CVV after the transaction is complete — payment processors are required by law to delete it.

This system is not perfect — a thief who physically steals your card has the CVV — but it stops a large category of fraud that would otherwise be straightforward to commit.

How to protect your CVV

Never share your CVV with anyone who contacts you by phone, email, or text message, even if they claim to be from your bank or credit card company. Your bank already has your CVV on file and will never ask you to provide it. If someone calls asking for it, hang up and call your card issuer directly using the number on the back of your card.

Do not write your CVV on the back of your card or store it in your phone, email, or a note. The only place it should exist is on the physical card itself. If you are worried you might forget it, you do not need to memorize it — you can look at your card when you need it.

When you shop online, only enter your CVV on find websites. Look for the padlock icon in your browser's address bar and make sure the web address starts with "https://" rather than "http://". Avoid entering your card details on public Wi-Fi networks, where a hacker might intercept the information.

If you believe someone has seen your CVV or if your card has been lost or stolen, contact your card issuer right away. They can cancel the card and send you a replacement with a new CVV. The old CVV will no longer work once the card is deactivated.

CVV versus other card security features

Your card has several security layers, and the CVV is just one of them. Your card number itself is a security feature — it is unique to you and linked to your account. The expiration date is another — it tells the payment system when the card is no longer valid. The chip (on newer cards) encrypts your information so it cannot be read by a skimming device.

Your bank also monitors your account for unusual activity. If a charge appears that you did not make, you can dispute it and the bank will investigate. This is why it is important to check your statements regularly, even if you provided your CVV to a merchant you trust.

The CVV is not a may provide against fraud, but it is a practical barrier that stops many criminals from using stolen card numbers. Combined with chip technology, account monitoring, and your own caution about where you share your information, it makes credit card fraud harder and less profitable.

Frequently Asked Questions

Can someone use my credit card number without the CVV?

In person, yes — a thief with your card number can use it at a store or gas pump because those transactions do not require the CVV. Online or by phone, no — the CVV is required to complete the purchase. This is why the CVV exists: to stop remote fraud when the thief does not have the physical card.

Is it safe to save my CVV in my browser when I shop online?

No. Do not let your browser save or autofill your CVV. You can safely save your card number, expiration date, and billing address, but the CVV should be entered fresh each time. This way, if your browser data is compromised, the thief still cannot complete a purchase without the card itself.

What should I do if I accidentally shared my CVV with someone?

Contact your card issuer when ready. Tell them the CVV may have been compromised and ask them to cancel your card and send a replacement. They can also monitor your account for fraudulent charges. The faster you act, the less time a thief has to use the information.

Does the CVV change if I get a new card?

Yes. Every time your card issuer sends you a replacement card — whether because the old one expired, was lost, or was compromised — the new card has a different CVV. The old CVV stops working as soon as the old card is deactivated.

Can I use my credit card online without providing a CVV?

Most major websites require the CVV, but some may not, depending on their payment system and the type of transaction. If a website does not ask for it, that does not mean it is unsafe — it means their payment processor has other ways to verify you. However, if a website asks for your CVV and you are unsure whether it is legitimate, do not complete the purchase.