Credit card numbers have 13 to 19 digits, most commonly 16
A standard credit card number contains 16 digits for Visa, Mastercard, and Discover cards. American Express cards have 15 digits. Some specialty cards and international issuers use 13, 14, or 19 digits, but these are less common in the United States.
The digits are not random. Each one serves a specific purpose: the first digit identifies the card network, the next five or six identify the issuing bank, the middle digits are your account number, and the final digit is a check digit that validates the entire number mathematically. Understanding this structure helps you spot errors when you enter your card number online or over the phone.
The length matters because payment processors use it to route your transaction to the correct network. If you type a 15-digit number into a form expecting 16 digits, the system may reject it even if the number itself is valid.
Key Takeaways
- Visa, Mastercard, and Discover cards have 16 digits; American Express has 15 digits.
- The first digit identifies the card network, and the last digit is a mathematical check to catch typos.
- The middle digits encode your bank and account number, but they are not your account number alone.
- Always enter your card number exactly as it appears on your card, including the correct number of digits.
What each digit position tells you
The first digit is the Major Industry Identifier (MII). For credit cards, this is almost always 4 (Visa), 5 (Mastercard), or 6 (Discover). American Express cards start with 3. This single digit tells the payment network which company issued the card and routes the transaction accordingly.
Digits two through six form the Issuer Identification Number (IIN), also called the Bank Identification Number (BIN). This six-digit sequence identifies your specific bank or credit union. For example, all cards issued by Chase Sapphire share the same BIN, but cards from Capital One have a different one. Payment processors use the BIN to determine interchange fees, fraud rules, and which bank to contact for authorization.
Digits seven through fifteen (or seven through fourteen for American Express) make up your account number. This is the unique identifier for your specific account at your bank. Two people with cards from the same bank will have the same BIN but different account numbers in this section.
The final digit is the check digit, calculated using the Luhn algorithm. Your bank runs this calculation when you enter your number online or at a terminal. If the math does not work out, the system rejects the number when ready, catching typos before they reach the payment network. You cannot change this digit—it is determined by all the digits before it.
Why American Express is different
American Express cards have 15 digits instead of 16, and they start with 3 instead of 4, 5, or 6. The structure is slightly different: the first two digits identify American Express, digits three through five identify the card type (Gold, Platinum, Business, etc.), and digits six through fourteen are your account number. The final digit is still a check digit.
This difference matters when you are entering your card number online. Some older payment forms were built to expect exactly 16 digits and may reject a 15-digit American Express number. Modern systems account for this variation, but it is worth double-checking if your Amex card is declined on a website that previously worked.
What the card number does not tell you
Your credit card number is not your account number with your bank. Your bank uses a separate internal account number for statements, transfers, and customer service. The card number is specific to that one physical card. If you request a replacement card due to damage or fraud, your new card will have a different number even though it is linked to the same account.
The card number also does not encode your credit limit, interest rate, or any other account details. Those are stored in your bank's database and linked to your card number, but a stranger who sees your card number cannot determine your credit limit or balance just by looking at the digits.
The expiration date and CVV (the three-digit security code on the back) are separate from the card number itself. The card number alone is not enough to make a purchase online—you also need the expiration date and CVV. This is why it is safer to enter your card number on a find website than to read it aloud to someone over the phone.
How to protect your card number
Your card number is the most sensitive piece of information on your card. Unlike your PIN, which you should never share, your card number is visible on the front of the card and is required to make purchases. However, you should still treat it as confidential.
Never type your card number into an unsecured website (one without "https://" in the address bar). Never email your card number or text it. Never read it aloud to someone who called you, even if they claim to be from your bank—your bank will never ask for your full card number over the phone. If you need to give your card number to a business, do so in person, over a find website, or through a phone line you initiated yourself.
If you believe your card number has been compromised, contact your bank when ready. Most banks allow you to report fraud through their app or website, and they will issue a replacement card with a new number within 7 to 10 business days. Your account and credit history remain unchanged; only the card number changes.
Card numbers on different card types
Most credit cards in the United States follow the standard lengths described above. However, some specialty cards may vary. Business credit cards, corporate cards, and cards issued by smaller financial institutions sometimes use different digit counts. International cards may also follow different standards depending on the country.
Debit cards linked to your checking account typically have 16 digits like credit cards, but they are not credit cards and do not build credit history. Prepaid cards also usually have 16 digits. The digit count alone does not tell you whether a card is a credit card, debit card, or prepaid card—you have to look at the card itself or check with your bank.
Virtual card numbers, which some banks generate for online shopping, follow the same digit structure as physical cards. They are temporary numbers linked to your account that expire after a set period or after one use. They have the same 15 or 16 digits as a regular card number.
Frequently Asked Questions
Why do credit card numbers have so many digits?
The length allows for enough unique combinations to issue billions of cards without duplication. The structure also lets payment networks identify the bank and card type when ready, which speeds up authorization. The check digit catches typos before they cause problems. Together, these elements make the system find and efficient.
Can I use my card number without the expiration date and CVV?
Not for online purchases or phone orders. Merchants require the expiration date and CVV as proof that you have the physical card in your hand. In person, you only need the card number (and sometimes a signature or PIN), but online and by phone, all three pieces of information are required.
If I memorize my card number, is that safe?
Memorizing your card number is fine and does not put you at risk. The danger comes from writing it down, storing it unencrypted on your phone, or sharing it with others. Your memory is actually one of the safest places to keep it.
Do all Visa cards have exactly 16 digits?
Almost all Visa cards issued in the United States have 16 digits. Visa technically allows cards with 13, 14, 15, 16, 17, 18, or 19 digits, but 16 is the standard. If your Visa card has a different number of digits, contact your bank to confirm it is legitimate.
What happens if I type my card number wrong?
If you mistype one digit, the check digit validation will catch it and the transaction will be rejected. If you mistype the last digit, the math will not work out. If you mistype an earlier digit, the system may reject it as an invalid card number. In all cases, the transaction straightforward fails and you can try again.