The security code is a three- or four-digit number printed on your card itself, separate from your card number

The security code — also called the CVV, CVC, or card verification value — is not embossed into your card like your account number. It is printed on the surface, and its location depends on which card network issued it. For Visa, Mastercard, and Discover cards, the code is a three-digit number on the back of the card, usually printed to the right of the signature strip. For American Express cards, it is a four-digit number printed on the front, above and to the right of your card number.

The security code exists so that online and phone transactions can verify you have the physical card in your hand. When you enter it during checkout, the merchant's system checks it against the card issuer's records without transmitting your full card number. This reduces fraud risk for card-not-present purchases — the kind where the seller never sees your card.

Key Takeaways

  • Visa, Mastercard, and Discover cards have a three-digit security code on the back, to the right of the signature strip.
  • American Express cards have a four-digit security code on the front, above the card number.
  • Never share your security code by email, phone, or text — legitimate merchants only ask for it during checkout.
  • The security code changes only if you request a replacement card; it does not rotate or expire on its own.
  • If you cannot locate the code on a physical card, your bank can read it to you over the phone, but will not email or text it.

How to locate the code on the back of your card

For most cards, turn the card over and look at the back. You will see a white or light-colored signature strip running horizontally across the lower portion. To the right of that strip, you will find three digits printed in a different font or color than the rest of the card. This is your security code. The digits are usually grouped together without spaces, though some cards print them with small gaps between them.

The exact position can vary slightly by bank and card design. Some cards print the code when ready after the signature strip ends; others place it further to the right. If you are having trouble spotting it, look for a small label or text that says "CVV" or "CVC" — though many cards do not label it at all.

How to locate the code on American Express cards

American Express cards are formatted differently from other major card networks. The security code on an Amex card is four digits, not three, and it appears on the front of the card rather than the back. Look at the front of your card, above the embossed card number. The four-digit code is printed in a smaller font, usually positioned to the right of the number itself.

Because the code is on the front of an American Express card, it is visible whenever you look at your card number. This is one of the few design differences between Amex and Visa or Mastercard products.

What to do if you cannot find the code on your card

If your card is worn, faded, or damaged, the printed security code may be difficult to read. If the digits are smudged or missing, contact your card issuer's customer service line — the number is usually on the back of your card or on your statement. A representative can read the code to you over the phone while you verify your identity.

Do not ask your bank to email or text the security code to you. Legitimate financial institutions will not send this information through email or text message. If someone claiming to represent your bank offers to send it this way, hang up or delete the message — this is a common fraud tactic.

When merchants ask for the security code

You will encounter requests for your security code in three main situations: online checkout, phone orders, and recurring billing setups. During online checkout, the security code field usually appears on the payment page, often labeled "CVV," "CVC," "Card Security Code," or "Security Code." You enter it just before confirming your purchase. For phone orders, the merchant's representative will ask you to read it aloud after you provide your card number.

For recurring charges — subscriptions, gym memberships, or automatic bill payments — you enter the security code once during setup. The merchant stores your card number and uses it for future charges, but the security code itself is not stored. This is by design: the code proves you had the card at the time of the first transaction.

Security code versus other card numbers

Your security code is different from your card number, expiration date, and cardholder name. The card number is the 16-digit (or sometimes 15-digit) number embossed on the front of your card. The expiration date is printed below the card number and tells you when the card stops working. The security code is printed separately and serves only to verify you have the physical card.

If someone has your card number and expiration date but not your security code, they cannot complete most online purchases. If someone has your security code but not your card number, it is useless to them. This separation is what makes the security code effective as a fraud prevention tool.

What happens if your security code is compromised

If you believe your security code has been seen by someone you do not trust — for example, you read it aloud to someone who turned out to be a scammer — contact your card issuer when ready. You do not need to wait for fraudulent charges to appear. Your bank can issue you a replacement card with a new security code.

The replacement card will have a different card number and a different security code. The process usually takes five to ten business days. In the meantime, your current card remains active unless you ask the bank to freeze it. If you have recurring charges set up on the old card, you will need to update them with the new card number and security code once the replacement arrives.

Frequently Asked Questions

Does the security code change if I don't use my card?

No. The security code stays the same for the life of the card. It only changes when you request a replacement card from your bank. Inactivity, time passage, or the number of transactions you make do not affect it.

Can I use my card online without the security code?

Most online retailers require the security code at checkout. Some merchants may skip it for small purchases or if you have an account with them, but this is rare. If a checkout page does not ask for it, the merchant is choosing not to require it — you cannot bypass the request yourself.

Is it safe to give my security code to a merchant?

Yes, when you are the one initiating the transaction. Enter it directly into the merchant's website or read it to a representative you called. Never give it to someone who contacts you first, even if they claim to represent your bank or a company you do business with.

What if I see my security code on a receipt?

Legitimate merchants should never print your security code on a receipt. If you see it, that is a sign the merchant is not following payment card industry standards. Report this to your card issuer and consider whether you want to continue using that merchant.

Do debit cards have security codes?

Yes. Debit cards issued by Visa or Mastercard have security codes in the same location as credit cards — three digits on the back for Visa and Mastercard, four digits on the front for American Express debit cards. The code works the same way for online and phone purchases.