The verification code is a three or four-digit number printed on your card, separate from your card number

The Card Verification Value (CVV) or Card Security Code (CSC) is a short number that proves you physically have the card in your hand. It is not stored in the card's magnetic stripe or chip, which is why merchants ask for it when you cannot show them the physical card — online purchases, phone orders, or mail orders.

The location and length depend on which card network issued your card. Visa, Mastercard, and Discover cards have a three-digit code. American Express cards have a four-digit code in a different spot. The code is never part of your account number, and the card issuer does not ask you for it by phone or email.

Key Takeaways

  • Visa, Mastercard, and Discover cards display a three-digit code on the back of the card, usually near the signature strip.
  • American Express cards show a four-digit code on the front of the card, above the account number.
  • The verification code proves you have the physical card and is required for online and phone purchases.
  • Never share your verification code by email, phone, or text — legitimate merchants only ask for it during checkout or payment.
  • If you cannot find the code on your card, contact your card issuer directly; some digital or replacement cards may display it differently.

Visa, Mastercard, and Discover: Back of the card

For most credit and debit cards, the verification code is printed on the back of the card. Look at the signature panel — the white or light-colored strip on the back where you sign your name. The three-digit code appears to the right of the signature area, usually in the last group of numbers you see.

The code is printed in a slightly raised or embossed style on some cards, while on others it is flat. Either way, it is always separate from the card number that runs across the front. If your card has been replaced or reissued, the new card will have a different verification code even though your account number stays the same.

American Express: Front of the card

American Express cards are different. The verification code is a four-digit number printed on the front of the card, above and to the right of your account number. It is smaller than the account number and sits in its own space.

Because American Express cards show the code on the front, some merchants and payment systems treat them differently during checkout. If you are entering your card details online and the form asks for a three-digit code but you have an American Express card, enter all four digits — most systems will accept it.

Digital cards and virtual card numbers

If you use a digital wallet like Apple Pay, Google Pay, or Samsung Pay, the verification code does not appear on your phone. The digital version of your card shows your account number and expiration date, but the security code is stored separately and never displayed. When you pay with a digital wallet, the merchant receives a one-time token instead of your actual card details, so the verification code is not needed.

Some card issuers also offer virtual card numbers for online shopping — a temporary account number that links to your real account but expires after one use or one merchant. These virtual numbers come with their own verification codes, which you will see when you generate the number. Check your card issuer's app or website to see whether this option is available to you.

Why merchants ask for it and when you should refuse

Merchants ask for the verification code during online checkout, phone orders, or mail orders because they cannot physically see your card. The code confirms that you have the card in your possession. Legitimate businesses only ask for it at the moment of payment — during checkout on their website, or when you call them to place an order.

Never share your verification code by email, text message, or phone unless you initiated the call or visit. Your card issuer will never ask you for it. If someone contacts you claiming to be from your bank or a merchant and asks for the code, hang up or close the message — this is a common fraud tactic. Scammers use the code to make purchases if they have your account number and expiration date.

What to do if you cannot find the code

If your card is worn, faded, or damaged and you cannot read the verification code, contact your card issuer's customer service number — it is printed on the back of your card or on your statement. They can read the code to you over the phone, or they can issue a replacement card with a new code printed clearly.

Some specialty cards, corporate cards, or cards issued outside the United States may have the code in a different location or format. If you have an unusual card and cannot locate the code, your issuer can confirm where it should be or provide it verbally. Do not attempt to guess or use a partial number — entering an incorrect code will cause the transaction to fail.

Frequently Asked Questions

Can someone use my card if they have the number and verification code?

They can attempt to make online or phone purchases, but they still need the expiration date and your billing address. The verification code alone is not enough. If you believe your card details have been compromised, contact your issuer when ready to report it and request a replacement card.

Is the verification code the same as my PIN?

No. Your PIN is a four-digit number you create and use at ATMs and in-person at stores. The verification code is printed on the card by the issuer and is used only for remote purchases. They serve different purposes and are never the same number.

Do I need the verification code for in-person purchases?

No. When you swipe, insert, or tap your card at a physical store, the merchant reads the chip or magnetic stripe and does not ask for the verification code. The code is only for situations where the merchant cannot see or read the physical card.

What if my replacement card arrives and the verification code is different?

This is normal. Each card is printed with its own verification code, so a replacement card will have a different code than your old one. Update any saved payment methods — subscriptions, online accounts, or stored cards — with the new code before your old card expires.