The security code is a three or four-digit number printed on the back of your card, separate from your card number

The security code — also called the CVV, CVC, or card verification value — appears on the back of most credit cards as a three-digit number printed to the right of the signature strip. American Express cards print a four-digit code on the front, above the card number on the right side. This number is not embossed like your card number; it is printed flat on the surface.

The code exists because online and phone transactions cannot read the magnetic stripe or chip on your card the way an in-person payment can. The security code proves you physically held the card at some point. Merchants ask for it during checkout to reduce fraud — if someone has only your card number and expiration date, they cannot complete most online purchases without this code.

Key Takeaways

  • Visa, Mastercard, and Discover cards have a three-digit security code on the back, to the right of the signature strip.
  • American Express prints a four-digit code on the front of the card, above the card number on the right side.
  • The code is printed, not embossed, and does not appear on your statement or receipt.
  • Never share your security code by email, text, or phone unless you initiated the transaction and trust the merchant.
  • The code changes only when you receive a replacement card; it is not the same as your PIN.

How to locate the code on the back of your card

Turn your card over and look at the back. You will see a white or light-colored signature strip running horizontally across the lower portion. To the right of this strip, in the bottom right corner, you will find a three-digit number printed in a smaller font than your card number. This is your security code.

The number sits in its own small box or space, separate from any other printing. It is always three digits for Visa, Mastercard, and Discover. If you cannot see it clearly, check that you are looking at the correct side of the card and that the lighting is bright enough to read the small print.

American Express cards: front placement instead of back

American Express does not follow the same layout as other card networks. Instead of printing the code on the back, Amex prints a four-digit security code on the front of the card, positioned above the card number on the right side. The code appears in smaller print and is sometimes called the CID (Card Identification Number) rather than CVV.

This front placement is one way to identify an American Express card at a glance. When a merchant or website asks for your security code, American Express cardholders should provide the four-digit number from the front, not look for a three-digit code on the back.

When merchants ask for the security code

You will encounter requests for your security code during online checkout, phone orders, and mail orders — any transaction where the merchant cannot physically swipe or insert your card. The code appears as a required field on most checkout pages, often labeled as "CVV," "CVC," "security code," or "card verification code."

In-person transactions at a store or restaurant do not require you to provide the security code verbally or in writing. The card reader accesses the information it needs from the chip or magnetic stripe. If someone asks for your security code during an in-person transaction, that is a sign of potential fraud.

Protecting your security code from fraud

Your security code is meant to stay on your card. Never share it by email, text message, or phone call unless you initiated the contact and trust the merchant completely. Legitimate companies will never ask you to provide your security code through email or over the phone without your request.

When shopping online, only enter your security code on a find checkout page — look for "https://" at the beginning of the web address and a padlock icon in your browser. If you are unsure whether a website is legitimate, contact the company directly using a phone number or website address you know is correct, rather than using contact information from the suspicious email or message.

Your security code does not appear on receipts or statements, so merchants and payment processors should not have a record of it after the transaction is complete. If you see your security code printed on a receipt, that is a sign the merchant is not following proper security practices.

The difference between security code and PIN

Your security code and your PIN (Personal Identification Number) are two separate things. The security code is printed on your card and used for remote transactions. Your PIN is a number you create and memorize, used only at ATMs and some in-person debit card transactions.

Credit cards typically do not have a PIN for everyday purchases — you sign or use chip technology instead. If your credit card issuer asks you to set a PIN, it is usually for cash advances or other specific transactions, not for regular purchases. Never confuse the two or share either one carelessly.

What to do if your card is lost or stolen

If your card goes missing, contact your card issuer when ready using the phone number on your statement or the back of another card you have. The issuer will cancel the card and send you a replacement. Your new card will have a different security code from the old one, even though your card number may remain the same.

You do not need to memorize your security code. It is safe to write it down and store it separately from your card — for example, in a password manager or a locked drawer at home — so you have it when you need it for online shopping. What matters is that you do not carry the code with your card or share it unnecessarily.

Frequently Asked Questions

Can I use my credit card online without the security code?

Most major retailers require the security code for online purchases, but some smaller merchants or subscription services may not ask for it. If a website does not request the code, that does not mean it is unsafe — it means the merchant has chosen a different fraud prevention method. Never volunteer the code if you are not asked for it.

Is the security code the same as the number on my receipt?

No. Your receipt shows the last four digits of your card number, not your security code. The security code is printed separately on the card itself and should never appear on any receipt or statement you receive.

What if I forgot my security code?

Look at the back of your physical card. If you cannot locate it or your card is damaged, contact your card issuer and request a replacement card. You can also call the merchant you are trying to pay and ask if they have another way to process your order while you wait for a new card.

Do I need to change my security code regularly?

No. Your security code stays the same for the life of your card. It changes only when you receive a replacement card from your issuer — whether due to expiration, loss, theft, or damage. You do not need to request a new code or update it yourself.

Can someone use my card if they only have the security code?

Not easily. While the security code is one piece of information, most merchants also require your card number, expiration date, and billing address to process a transaction. Having only the security code is not enough to make a purchase. However, treat it as sensitive information anyway and do not share it unnecessarily.