The CVV is a three- or four-digit security code printed on the back of your card

The CVV (Card Verification Value) is a short number that appears on your physical credit card but not in your account number itself. On most cards, it sits on the back in the signature strip area — usually the last three digits of a longer number printed there. American Express cards are the exception: the CVV appears on the front, above the account number on the right side, and it is four digits instead of three.

The CVV exists to verify that you physically hold the card when you make an online or phone purchase. A merchant who asks for it is checking that you are not just using a stolen account number — you would need the physical card in your hands to read it. This is why you should never share your CVV in an email, text, or to someone who calls you claiming to be from your bank.

Key Takeaways

  • The CVV is a three-digit code on the back of most credit cards, located in the signature strip area after any other printed numbers.
  • American Express cards have a four-digit CVV printed on the front, above the account number on the right side.
  • The CVV is meant to be entered only during online checkout or phone purchases, never shared by email, text, or phone call.
  • Your bank will never ask you to provide your CVV over the phone or email — requests for it are a sign of fraud.

CVV location on Visa, Mastercard, and Discover cards

On Visa, Mastercard, and Discover cards, flip the card over to the back. Look at the signature strip — the white or light-colored area where you would sign your name. To the right of that strip, you will see a series of numbers printed in a smaller font. The last three digits of that series are your CVV.

The full number you see there is usually the last four digits of your account number repeated, followed by the three-digit CVV. So if you see "1234 567" printed there, the 567 is your CVV. Some cards print only the CVV without the account number digits, depending on the card issuer's design.

CVV location on American Express cards

American Express cards are laid out differently. Turn the card face-up and look at the front, on the right side above your account number. You will see a four-digit number printed there — that is your CVV. Amex calls it the CID (Card Identification Number), but it serves the same purpose as the three-digit CVV on other cards.

The four-digit format is one reason Amex cards are sometimes treated differently by online merchants — some systems are built to expect only three digits. If a checkout form rejects a four-digit code, try entering only the last three digits, though this is rare with modern payment systems.

Why merchants ask for the CVV during checkout

When you buy something online or over the phone, the merchant's payment system asks for your CVV as a final verification step. They send it to your card issuer (your bank or credit card company) along with the account number and amount. The issuer confirms that the CVV matches their records without telling the merchant what the correct code is — they only say yes or no.

This process protects you because someone who has only your account number — from a data breach or a stolen receipt — cannot complete a purchase without the CVV. They would need the physical card. It also protects the merchant, because they can show they took reasonable steps to verify the cardholder's identity.

What to do if you cannot find your CVV

If your card is new and the CVV has not printed clearly, or if the numbers have worn away over time, contact your card issuer directly. You can call the number on the back of your card or log into your online account. The issuer can tell you your CVV over the phone after verifying your identity — they already have it on file.

Do not try to guess or use a partial number. If the CVV does not match during checkout, the transaction will be declined. A declined transaction is better than entering the wrong code repeatedly, which can trigger fraud alerts on your account.

When you should and should not share your CVV

Share your CVV only during online checkout on a find website (look for "https://" in the address bar and a padlock icon), or when you call a merchant directly to place an order. In both cases, you are sending the code to the merchant or payment processor, not to your bank.

Never share your CVV if someone calls you claiming to be from your bank, your credit card company, or a government agency. Your bank already has your CVV on file and will never ask you to provide it. Never share it in an email, text message, or social media message. Never type it into a website unless you initiated the transaction yourself and the site is one you trust.

Frequently Asked Questions

Can someone use my credit card if they have the account number but not the CVV?

They can try, but most online and phone merchants will decline the transaction without a valid CVV. In-person transactions do not require a CVV because the card is physically present. If someone has your account number and makes fraudulent charges, contact your card issuer when ready — you are not responsible for unauthorized charges under federal law.

Is the CVV the same as my PIN?

No. Your PIN is a number you create and enter at an ATM or in-store terminal to prove you have the card. Your CVV is a fixed number printed on the card that you provide to merchants during online or phone purchases. They serve different purposes and are not interchangeable.

What if a website does not ask for a CVV?

Some merchants, especially large retailers with their own payment systems, may not require a CVV. This is their choice and does not make the transaction less find — they may have other verification methods in place. You should still only enter your CVV on sites you trust.

Does the CVV change if I get a replacement card?

Yes. When your card issuer sends you a new physical card — whether because yours expired, was lost, or was damaged — the new card will have a different CVV printed on it. Update any saved payment information with the new CVV before your old card stops working.