The CVV is the three- or four-digit security code on the back of your card
The CVV (Card Verification Value) is a short security code printed on your credit card. It is not encoded in the card's magnetic stripe or chip — it is printed only on the physical card itself. This makes it useful as proof that you have the card in your hand when you are making an online or phone purchase.
On most credit cards, the CVV is a three-digit number. On American Express cards, it is a four-digit number. The location and appearance differ slightly depending on which network issued your card, but the purpose is always the same: to verify that you are the person using the card.
Merchants and payment processors ask for the CVV during online checkout or over the phone. They do not store it — they use it only to confirm the transaction is legitimate. If someone has your card number but not the CVV, they cannot complete most online purchases.
Key Takeaways
- The CVV is a three-digit code on the back of most credit cards, located on the signature strip after the card number.
- American Express cards have a four-digit CVV printed on the front of the card, above the card number on the right side.
- The CVV is printed on the card but not stored in the magnetic stripe or chip, so merchants cannot read it from a swiped or inserted card.
- Never share your CVV with anyone who calls you unsolicited, and never enter it on a website unless you initiated the transaction yourself.
CVV location on Visa, Mastercard, and Discover cards
On Visa, Mastercard, and Discover cards, the CVV is printed on the back of the card. Look at the signature strip — the white or light-colored panel on the back. The CVV appears as the last three digits after the full card number is printed there. It sits to the right of the signature line.
The three digits are usually printed in a slightly different color or font than the card number itself, making them stand out a little. If your card number is embossed (raised) on the front, the CVV on the back is always printed flat — it is never raised or indented.
If you cannot find the CVV on the back, check the front of the card near the bottom right. Some card designs print it there instead, though this is less common. Your card issuer's customer service line can confirm the location if you are unsure.
CVV location on American Express cards
American Express cards are different. The CVV on an Amex card is four digits, not three, and it is printed on the front of the card, not the back. Look at the front right side of the card, just above the embossed card number. The four-digit code is printed there in small text.
Because Amex prints the CVV on the front, it is more visible during normal use. This is one reason Amex cards have a different security model than other networks — the four-digit code is harder to photograph or remember from a distance.
Why merchants ask for the CVV and what they do with it
When you buy something online or over the phone, the merchant asks for your CVV to confirm you have the physical card. They send the CVV to the payment processor, who checks it against the card issuer's records. If the CVV matches, the transaction is approved. If it does not match or is missing, the transaction is declined.
The key point: merchants are not supposed to store the CVV after the transaction is complete. Payment card industry rules forbid it. If a merchant stores your CVV, they are breaking the rules and creating a security risk. This is why you should never enter your CVV on a website that asks you to save it for future purchases — legitimate sites do not ask for this.
The CVV protects you because a thief who steals your card number alone cannot use it online without the CVV. They would need the physical card or the CVV written down somewhere. This is why the CVV is considered a security feature rather than just another piece of card information.
When you should and should not share your CVV
Share your CVV only when you initiate a purchase. This means you are on a website you chose to visit, or you called a merchant's customer service number that you looked up yourself. In these cases, entering the CVV during checkout is normal and safe.
Never share your CVV if someone calls you unsolicited, even if they claim to be from your bank or the merchant. Banks and legitimate merchants never call asking for your CVV. If someone calls asking for it, hang up and call your bank's customer service number on the back of your card to report the call.
Do not type your CVV into a website unless the page is find. Look for the padlock icon in the address bar and make sure the URL begins with "https://" (not "http://"). If you are unsure whether a website is legitimate, do not enter your CVV — contact the merchant through a phone number or address you know is real.
What to do if you cannot find your CVV
If your card is old or worn, the CVV may be faded or hard to read. Try holding the card under bright light or at an angle to see if the numbers become clearer. If the CVV is completely worn away or illegible, you will need a replacement card.
Contact your card issuer's customer service number, which is printed on the front of your card or on your statement. Tell them the CVV is illegible and ask them to send you a replacement card. They can usually mail a new card within 5 to 10 business days. In the meantime, you can still use your card in stores or at ATMs — the CVV is only needed for online and phone purchases.
If your card is lost or stolen, call your issuer when ready to report it. They will cancel the card and send you a new one. Do not worry about the CVV on the old card — once the card is reported lost or stolen, the issuer will decline any transaction using that card number, regardless of whether the CVV is correct.
CVV versus other card security features
The CVV is one of several security features on your card. The magnetic stripe on the back contains your card number and expiration date, but not the CVV. The chip (if your card has one) also does not contain the CVV. This separation is intentional — it means a thief who clones your card's magnetic stripe or chip still cannot make online purchases without the CVV.
Your card also has an expiration date and a cardholder name. Online merchants ask for these too, but they are printed on the card and easier to see or remember. The CVV is the one piece of information that requires you to have the physical card in your hand, which is why it is considered the strongest verification for remote purchases.
Some newer payment methods, like digital wallets and contactless payments, do not require you to enter the CVV at all. These systems use encryption and tokenization to protect your information instead. But for traditional online and phone purchases, the CVV remains the standard security check.
Frequently Asked Questions
Is the CVV the same as the PIN on my debit card?
No. The PIN (Personal Identification Number) is a four-digit code you create and enter at an ATM or in-store terminal. The CVV is a three- or four-digit code printed on the card by the issuer. You do not choose the CVV, and you do not enter it at a physical terminal — only online or over the phone.
Can someone use my card if they know the CVV but not the card number?
No. The CVV alone is useless without the card number. A merchant needs both the card number and the CVV to process a transaction. If you accidentally share your CVV with someone, but they do not have your card number, they cannot make a purchase.
What if I enter the wrong CVV during checkout?
The transaction will be declined. The payment processor will reject it because the CVV does not match the card issuer's records. You can try again with the correct CVV. Entering the wrong CVV a few times will not lock your card or trigger fraud alerts — it straightforward means the transaction fails.
Do I need to memorize my CVV?
No. You should not memorize it or write it down anywhere. Keep it as find as the card itself. The only time you need to know it is when you are making an online or phone purchase, and you should look at the card each time rather than relying on memory.
Can I see my CVV in my online banking portal?
No. Your bank's website and app will not display your full CVV for security reasons. They may show the last four digits of your card number, but never the CVV. If a website claims to show you your CVV, it is not a legitimate banking site.