CVV is the three- or four-digit security code on your credit card
CVV stands for Card Verification Value. It is a number printed on your card — not encoded in the magnetic stripe or chip — that exists only to prove you physically hold the card when you make a purchase online or over the phone.
On most cards, the CVV is a three-digit number on the back, near the signature line. American Express cards print a four-digit CVV on the front, above the card number. The CVV changes only if you get a new card; the number stays the same for the life of that particular card.
The CVV is not your PIN. Your PIN is what you enter at an ATM or a checkout terminal. The CVV is what you type into a website when you buy something online. A merchant who sees your CVV knows you have the physical card in your hand — or at least that someone does.
Key Takeaways
- CVV is a three- or four-digit code printed on your card that proves you physically hold it during online or phone purchases.
- The CVV sits on the back of most cards near the signature line, or on the front of American Express cards above the card number.
- Never share your CVV with anyone except the merchant you are paying, and never enter it on a website unless you initiated the transaction.
- A legitimate merchant will ask for your CVV only during checkout; they should never ask for it in an email, text, or phone call.
Where to find your CVV on different card types
Visa, Mastercard, and Discover cards all print the CVV on the back, to the right of the signature panel. It is the last three digits of a longer number printed there. If you hold the card with the back facing you, you will see the card number printed across the front, then below that a signature line, then to the right of the signature line a series of digits — the last three are your CVV.
American Express cards are different. The CVV appears on the front of the card, above and to the right of the card number itself. It is four digits instead of three. If you hold an Amex card facing you, the CVV is the four-digit number printed in the upper right corner.
Some business cards and store-branded cards may place the CVV in a different location. If you cannot find it, call the card issuer — the bank or credit union whose name appears on the front of the card — and they will tell you where it is.
Why merchants ask for your CVV
When you shop online, the merchant never sees your physical card. They see only the numbers you type. A thief who steals your card number from a data breach or a skimming device has the number itself, but not the CVV — because the CVV is printed on the card, not stored in the magnetic stripe or the chip.
By asking for the CVV during checkout, the merchant confirms that someone with the actual card is making the purchase. This reduces fraud. If a thief has only your card number but not the CVV, most online merchants will decline the transaction.
The CVV also protects you. If someone charges something to your card without your permission and claims they had your card number, you can tell your bank that you never gave out your CVV. That is evidence the transaction was not made by you.
When and where to enter your CVV safely
You should enter your CVV only during checkout on a website where you are making a purchase, or when a merchant asks for it over the phone during a transaction you initiated. If you called a company to order something, or if you are on their website buying something right now, it is safe to give them your CVV.
Never enter your CVV on a website unless you started the transaction yourself. If you clicked a link in an email or text message and landed on a checkout page, do not enter your CVV. Scammers create fake checkout pages that look identical to real ones. If you are unsure whether a website is real, close the browser, go to the company's official website directly, and start over.
Never give your CVV to anyone who contacts you first — not by email, not by text, not by phone, not by social media. A legitimate merchant will never ask for your CVV this way. If your bank calls you about fraud, they already have your account information and will not ask you to read your CVV aloud.
What happens if someone gets your CVV
If a thief has your card number and your CVV, they can make online purchases or phone purchases as if they were you. They cannot use the card at a physical store, because they do not have the physical card itself. But online and over the phone, the CVV is all they need.
If you believe your CVV has been compromised — for example, you entered it on a fake website, or you gave it to someone you now suspect was a scammer — contact your card issuer when ready. Tell them you want to report suspected fraud. They will cancel your card and issue you a new one with a new CVV. You will not be liable for fraudulent charges if you report them promptly.
You do not need to memorize your CVV or keep it written down. The only time you need it is when you are making a purchase. After the transaction is complete, forget it.
CVV versus other card security features
Your card has several security features that work together. The magnetic stripe on the back holds your card number and expiration date in a format that a card reader can scan. The chip (the small metallic square on the front) does the same thing but in an encrypted format that is harder to counterfeit. The CVV proves you have the physical card. The expiration date shows when the card stops working.
When you shop in a store, the merchant reads your chip or swipes your magnetic stripe. They do not ask for your CVV because you are there with the card. When you shop online or by phone, the merchant cannot read your chip or stripe, so they ask for your CVV instead. It is a substitute for the physical card being present.
Some cards now include 3D find, a system that sends a code to your phone during online checkout. This adds another layer of security beyond the CVV. If your card supports it, the merchant's website will prompt you to enter the code sent to your phone. This proves not only that you have the card, but that you have access to the phone number on file with your bank.
Frequently Asked Questions
Is it safe to save my CVV on a website for future purchases?
No. Never let a website store your CVV. Legitimate merchants do not save CVV numbers — they cannot, by law. If a website offers to remember your CVV for next time, that is a red flag. You can safely save your card number and expiration date for repeat purchases, but always enter your CVV fresh each time.
What if I lost my card and someone finds it?
Call your card issuer when ready and report it lost. They will cancel the card and send you a new one. The person who finds it can see your CVV, but they cannot use it online without also knowing your card number and expiration date. At a physical store, they cannot use it at all because most terminals now require a chip read or a PIN. Still, report it right away to be safe.
Can I use my card online without giving the CVV?
Most online merchants require the CVV before they will process your order. Some may not ask for it if you have made purchases with them before and they have your information on file. But you cannot force a merchant to skip the CVV requirement. If they ask for it, you must provide it or find another way to pay.
Does the CVV protect me from in-person fraud?
No. The CVV only protects online and phone purchases. At a physical store, the merchant reads your chip or stripe and you enter your PIN. The CVV is not involved. This is why you should monitor your card for unauthorized charges and report them to your bank as soon as you see them.