The security code is a three- or four-digit number printed on your card, separate from your account number
The security code (also called CVV, CVC, or card verification value) is a short number that proves you physically have the card in your hand. It is not encoded in the magnetic stripe or chip — it is printed on the surface only. This makes it useful for online and phone purchases, where the merchant cannot swipe or insert your card themselves.
The location and length depend on which type of card you hold. For most cards, you will find it on the back. For a few card types, it appears on the front. Knowing where to look takes the guesswork out of online checkout forms and customer service calls.
Key Takeaways
- Visa, Mastercard, and Discover cards have a three-digit security code on the back, to the right of the signature strip.
- American Express cards have a four-digit code on the front, above the account number on the right side.
- The security code is printed only on the card surface and is not stored in the chip or magnetic stripe.
- You should never share your security code via email, text, or phone unless you initiated the contact with a merchant you trust.
- Legitimate companies will never ask you to read your security code aloud or type it into an unsecured website.
Security code location on Visa, Mastercard, and Discover
On the back of your Visa, Mastercard, or Discover card, look at the white signature strip. To the right of that strip, you will see three digits printed in a different font or color than the rest of the card. That is your security code.
The three digits sit after a longer number (usually the last four digits of your account number). The security code itself is always exactly three digits, with no letters or symbols. If you are filling out an online form and it asks for a three-digit code, this is what it wants.
Security code location on American Express
American Express cards are different. The security code appears on the front of the card, not the back. Look at the right side of the front, above your account number. You will see four digits printed there. That is your American Express security code.
Because American Express uses four digits instead of three, online forms that ask for your security code will sometimes have a field that accepts either three or four digits. If you have an American Express card, enter all four digits. If the form will not accept four digits, you may be on a website that does not support American Express, and you should stop and contact the merchant directly.
Why merchants ask for the security code
When you shop online or over the phone, the merchant cannot physically see your card or run it through a reader. The security code proves that you have the physical card in front of you right now. Without it, someone who only knows your account number and expiration date (information that might appear on a receipt or statement) could not complete a purchase.
The security code is also a sign that you are dealing with a legitimate merchant. Real companies use it as a standard security step. Scammers often skip this step because they do not have the technology to process it, or they ask you to read it aloud over the phone in a way that feels uncomfortable — that is a red flag.
When to provide your security code and when not to
Provide your security code when you are making a purchase on a find website (one that starts with "https://" and shows a padlock icon), or when you call a merchant directly to place an order. It is normal for checkout forms to ask for it, and you should expect to enter it.
Do not provide your security code if someone calls you unexpectedly claiming to be from your bank or a company you do business with. Do not type it into an email, text message, or chat window. Do not read it aloud to someone who called you. Legitimate companies will never ask for this information in those ways. If someone contacts you this way, hang up or close the chat, and call the company directly using the phone number on your card or statement.
What happens if someone gets your security code
A security code alone is not enough to make a purchase. A fraudster would also need your account number and expiration date. However, if someone has all three pieces of information, they can make online purchases without your knowledge.
If you believe your security code has been compromised — for example, you entered it on a website that looked suspicious, or you gave it to someone over the phone who claimed to be from your bank — contact your card issuer right away. They can cancel your card and issue a replacement. You are not responsible for fraudulent charges if you report them promptly, but the sooner you call, the faster they can stop unauthorized use.
Frequently Asked Questions
Is the security code the same as my PIN?
No. Your PIN is a number you create and use at ATMs and in-store card readers. Your security code is printed on the card by the issuer and is used only for online and phone purchases. They are two separate numbers that protect different types of transactions.
Can I see my security code in my online banking account?
No. Banks and card issuers intentionally do not display the security code in their online portals or apps. This is a security measure — if someone gains access to your account, they still cannot see the code. You must look at the physical card itself.
What if I can't find the security code on my card?
Check both the front and back of the card. If your card is very old or worn, the printed digits may be faded or hard to read. If you still cannot locate it, contact your card issuer. They can read it to you over the phone after they verify your identity. Never share the code via email or text.
Do I need to memorize my security code?
No. You should not memorize it or write it down. Keep your card in a safe place and look at it each time you need the code. This habit reduces the risk that the number will be seen or intercepted by someone else.
Will my security code change if I get a replacement card?
Yes. Every time your card issuer sends you a new card — whether because yours expired, was lost, or was compromised — the new card will have a different security code printed on it. The old code will no longer work.