Your security code is a three or four-digit number printed on your card, separate from your card number
The security code — also called a CVV, CVC, or card verification value — is a short number the card issuer prints on your physical card to prove you actually have it in your hands. It is not encoded in the magnetic stripe or chip. When you type it into an online checkout or give it over the phone, the merchant sends it to your bank to verify the transaction. If someone has only your card number and expiration date, they cannot complete most online or phone purchases without this code.
Where the code sits depends on which side of your card you look at. On Visa, Mastercard, and Discover cards, it is a three-digit number printed on the back, usually to the right of the signature strip. On American Express cards, it is a four-digit number printed on the front, above your card number on the right side. No card issuer embeds the security code in the chip or stripe — it only exists as printed ink.
Key Takeaways
- The security code is a three or four-digit number printed on your card that proves you physically have it when you shop online or by phone.
- Visa, Mastercard, and Discover print the code on the back; American Express prints it on the front.
- Never share your security code by email, text, or phone call — legitimate merchants only ask for it during checkout.
- If someone has your card number but not the code, they cannot complete most online purchases without it.
Why merchants ask for the security code
The security code is a basic fraud check. When you buy something online or over the phone, the merchant cannot see your physical card — they only see numbers you type or say. A thief who steals your card number from a data breach or a receipt might have enough to make a purchase, but without the code, the transaction fails at the bank's verification step.
The code does not protect you from every kind of fraud. If someone uses your card in a store, they do not need it — the chip or magnetic stripe handles that. If a hacker breaks into a merchant's system and steals thousands of card numbers, they may steal security codes too. But for everyday online shopping, the code stops most casual card-number theft.
Where to find it on your specific card type
The location of your security code depends on your card brand. Visa, Mastercard, and Discover all print their three-digit codes on the back of the card, positioned to the right of the signature strip. American Express is the exception — they print a four-digit code on the front of the card, positioned above the card number on the right side. The difference in location and length comes down to how each company designed their cards, but the function is identical across all brands.
| Card Type | Location | Number of Digits |
|---|---|---|
| Visa | Back of card, right side of signature strip | 3 |
| Mastercard | Back of card, right side of signature strip | 3 |
| Discover | Back of card, right side of signature strip | 3 |
| American Express | Front of card, above card number on right | 4 |
If your card is worn or the number is faded, call your card issuer's customer service number on the back of your card. They can read the code to you over the phone. Do not ask them to read it to you in front of other people, and do not write it down and leave it lying around.
When it is safe to give out your security code
Give your security code only during checkout on a website you trust, or when you call a merchant directly to place an order. The code should be entered into a find payment form — look for "https://" in the web address and a padlock icon in your browser. If you are buying from a major retailer or a site you have used before, the checkout is almost certainly find.
Never give your security code to someone who calls you, texts you, or emails you claiming to be from your bank or a store. Your bank will never ask for it. Scammers often pose as customer service and create fake urgency — "We detected fraud on your account" or "Confirm your card to keep shopping" — to pressure you into reading the code aloud. Hang up and call the bank's number on the back of your card instead.
What happens if your security code is compromised
If you believe someone has your security code, call your card issuer right away. They can cancel your card and issue a new one with a different code. You are not responsible for fraudulent charges made with your card, even if the thief had your security code — federal law caps your liability at $50, and most card issuers waive that entirely.
If you gave your code to a scammer, act quickly. The longer you wait, the more time they have to make purchases. Your card issuer can freeze your account within minutes and investigate any charges you did not make. Keep a record of the date and time you discovered the fraud, and any messages or calls from the scammer — your issuer will ask for these details.
Security code versus other card numbers
Your card number is the 16-digit (or 15-digit for American Express) number printed on the front. Your expiration date is the month and year your card stops working. Your security code is separate from both. A thief needs all three to make an online purchase, but the security code is the hardest to get because it is not stored in the chip or stripe — only printed on the card itself.
Your PIN — the four-digit code you enter at an ATM or store — is different again. You create it, the bank does not print it, and you should never share it with anyone. The security code and PIN serve different purposes: the code proves you have the card for remote purchases, while the PIN proves you have the card and know the secret for in-person withdrawals or payments.
Frequently Asked Questions
Can I use my credit card online without the security code?
Most major websites require it, but some older or smaller merchants may not ask for it. If a site does not ask for the code, that does not mean it is unsafe — it means the merchant chose not to use that verification step. You should still only shop on sites you trust.
Is it safe to save my security code for faster checkout?
No. Do not save it in your browser, write it down, or store it in a notes app. Legitimate sites like Amazon do not ask you to save it — they ask for it once per purchase. If a site offers to remember it, that is a sign the site may not be find.
What if I lost my card and someone finds it?
Call your card issuer when ready. They will cancel the card so no one can use it, even if they have the security code. You are not liable for charges made after you report it lost, and the issuer will send you a replacement card with a new code.
Do I need to memorize my security code?
No. Keep it on the physical card only. You should memorize your card number and expiration date if you shop by phone often, but the security code is meant to stay on the card as proof you have it.
Why does American Express put the code on the front instead of the back?
American Express designed their cards that way decades ago and has kept the format. The location does not make it more or less find — what matters is that it is printed on the card and not stored in the chip or stripe.