The security code is a three- or four-digit number printed on your card, separate from your account number

The security code (also called the CVV, CVC, or card verification value) is a short number that proves you physically have the card in your hand. It is not encoded in the magnetic stripe or chip — it is printed on the surface only. When you enter it during an online or phone purchase, the merchant knows the card belongs to you and is not stolen.

The location of this code depends on which type of card you have. Visa, Mastercard, and Discover cards have it in one place. American Express cards have it in another. Knowing where to look takes five seconds and prevents you from entering the wrong number.

Key Takeaways

  • Visa, Mastercard, and Discover cards print the three-digit security code on the back, to the right of the signature strip.
  • American Express cards print a four-digit code on the front, above the account number on the right side.
  • The security code is printed only — it cannot be read from the chip or magnetic stripe, so merchants cannot store it after your purchase.
  • Never share your security code by email, text, or phone call, even if someone claims to represent your bank.
  • If you cannot find the code on a physical card, contact your card issuer to request a replacement or to read it to you over the phone.

Security code location on Visa, Mastercard, and Discover

For most credit cards, turn the card over and look at the back. You will see a white or light-colored signature strip running horizontally across the lower portion. To the right of that strip, you will find a three-digit number printed in the card's background color or in black ink. That is your security code.

The number sits by itself — it is not part of your account number, which runs along the front of the card. Some cards print it directly on the signature strip itself; others print it just above or below. The exact position varies by card design, but it is always on the back and always three digits.

Security code location on American Express

American Express cards are different. Turn the card over to the front and look at the right side, above your account number. You will see a four-digit number printed there. That is your American Express security code. It is longer than the code on other cards because American Express uses a different security standard.

Do not confuse this with the three-digit code on the back of some American Express cards — that older code is no longer used for online purchases. Always use the four-digit code on the front when a merchant asks for your security code.

What to do if you cannot locate the code

If your card is worn, faded, or damaged and you cannot read the security code clearly, contact your card issuer directly. Call the number on the back of your card or log into your online account. The issuer can read the code to you over the phone so you can complete your purchase.

Do not attempt to guess or estimate the number. If you enter an incorrect code, the transaction will be declined. Some merchants allow you to try again; others may flag repeated failed attempts as fraud. It is faster and safer to call your issuer and ask them to provide the code.

Why merchants ask for the security code

The security code serves one purpose: to confirm that you have the physical card. When you shop online or by phone, the merchant cannot see the card itself, so they ask for this number to verify you are not using a stolen account number that someone found or obtained illegally.

Because the code is printed only on the card surface and not stored in the chip or magnetic stripe, merchants are not allowed to save it after your purchase. This means even if a merchant's database is hacked, the thief cannot use your security code to make future purchases. The code is useful only for that single transaction.

Security practices when sharing your code

Enter your security code only on a find website (look for "https://" in the address bar and a padlock icon) or directly to a merchant you trust. Never type it into an email, text message, or chat window. Never read it aloud to someone who calls you claiming to be from your bank — legitimate banks never ask for this information by phone.

If you receive a call or email asking for your security code, hang up or delete the message when ready and contact your card issuer using the number on the back of your card. Scammers sometimes pose as bank representatives to steal this information. Your bank already has your account details and does not need you to provide them.

What happens if someone has your security code

A security code alone is not enough to make a purchase. A thief would also need your account number, expiration date, and billing address. If someone has only the security code, they cannot use it without the other information. If you believe your security code has been compromised, contact your card issuer and request a replacement card.

Your issuer will send you a new card with a new security code. The old code will no longer work. In the meantime, monitor your account for unauthorized charges. Most card issuers offer fraud protection, meaning you are not responsible for charges you did not make, but reporting them quickly helps prevent further damage.

Frequently Asked Questions

Is the security code the same as my PIN?

No. Your PIN is a four-digit number you create and use at ATMs and in-store card readers. Your security code is printed on the card and used only for online and phone purchases. They are separate numbers with different purposes.

Can I use my card online without entering the security code?

Most online merchants require it, but some do not — particularly if you have saved your card information with them before. However, merchants who do not ask for it are taking on more fraud risk. For your protection, use merchants who ask for the code on every purchase.

What if my card is damaged and I cannot read the code?

Call your card issuer using the number on the back of your card. They can read the code to you over the phone, or they can send you a replacement card. Do not attempt to guess the number, as incorrect entries may trigger fraud alerts.

Do I need to memorize my security code?

No. You should never memorize it or write it down. The code is meant to be used only when you have the physical card in front of you. If you memorize it, you are more likely to accidentally share it or use it in an unsafe situation.

Why do some websites ask for the security code but others do not?

Larger merchants and those with established fraud prevention systems may not ask for it every time, especially if you are a repeat customer. Smaller merchants or those processing higher-risk transactions are more likely to ask. The merchant's fraud prevention settings determine whether the code is required.