Your credit card has 16 digits, but they are not all the same thing

A standard credit card displays 16 numbers across its front. These are split into four groups of four, and they serve different purposes. The first six digits identify your bank and card type. The next nine digits are your unique account number. The final digit is a check digit — a mathematical safeguard that catches typos and fraud. Together, they form what banks call your Primary Account Number, or PAN.

You will also see other numbers on your card: a three or four-digit security code on the back, an expiration date, and sometimes a CVV2 or CVC number. Each one has a specific job, and understanding what they do helps you use your card safely and know what information is actually sensitive.

Key Takeaways

  • The 16 digits on the front of your card break into four parts: a six-digit bank identifier, a nine-digit account number, and a one-digit check digit.
  • The three or four-digit code on the back (CVV or CVC) is a security feature that proves you physically hold the card.
  • Your expiration date tells merchants and your bank when the card stops working, usually four years after issue.
  • The check digit at the end uses a mathematical formula to catch errors and is calculated from the other 15 digits.

The first six digits: Your bank and card network

The opening six numbers on your card are called the Issuer Identification Number, or IIN. They tell the payment system which bank issued your card and which network it runs on — Visa, Mastercard, American Express, or Discover. The first digit alone narrows it down: Visa cards always start with 4, Mastercard with 5, American Express with 3, and Discover with 6.

These six digits are not secret. Merchants see them every time you swipe or tap. They use this information to route your transaction to the right payment processor and to check whether your card type is accepted. If a store says "we don't take Amex," they are reading these first six digits.

Digits seven through fifteen: Your account number

The next nine digits are your unique account number within your bank's system. This is the number that ties the card to your specific account, your credit line, and your payment history. No two cardholders at the same bank have the same nine digits in this position.

This is the number your bank uses to look up your account when you call customer service or log into your online portal. It is also the number that appears on your monthly statement. Unlike the bank identifier, this number is sensitive — someone with your account number and expiration date can attempt fraudulent charges.

The final digit: The check digit that catches errors

The sixteenth and last digit is calculated using a formula called the Luhn algorithm. Your bank runs the first 15 digits through this mathematical check, and the result is that final digit. When you enter your card number online or a merchant swipes it, the payment system runs the same calculation to verify the number was entered correctly.

This catches typos when ready. If you accidentally transpose two digits or miss one, the check digit will not match, and the transaction will be rejected before it even reaches your bank. It also catches many common fraud attempts, because a stolen number with a digit changed at random will fail the Luhn check.

The three or four-digit security code on the back

On the back of your card, usually near the signature strip, you will find a three or four-digit number. Visa, Mastercard, and Discover call this the CVV (Card Verification Value). American Express calls it the CVC (Card Verification Code), and it appears on the front of the card instead of the back.

This code is a security feature that proves you physically hold the card. When you enter it during an online purchase, you are telling the merchant "I have the card in my hand right now." The code is not stored in the magnetic stripe or chip, so a thief who steals your card number alone cannot use it for online purchases without also stealing the physical card or guessing the code.

Never give this number to anyone who calls you, texts you, or emails you. Your bank will never ask for it. Merchants only need it for online or phone purchases, not in-person transactions.

Your expiration date and what it actually controls

The expiration date — usually printed as two digits for month and two for year — tells you when your card stops working. Most credit cards expire four years after they are issued, though some banks issue cards with three-year or five-year terms.

When your card expires, the card itself becomes invalid, but your account does not close. Your bank will mail you a replacement card with a new expiration date, usually about two weeks before the old one expires. Any recurring charges you have set up (subscriptions, automatic bill pay) will usually transfer to the new card automatically, though you should verify this with each merchant.

The expiration date is printed on the front of your card in plain sight because merchants need it to process your transaction. It is not a secret, but it is still sensitive when combined with your account number and CVV.

Why credit card numbers vary by card type

American Express cards have 15 digits instead of 16, and the security code appears on the front rather than the back. Discover cards follow the 16-digit format like Visa and Mastercard. Some specialty cards or business cards may have additional numbers printed on them, such as a PIN or a separate account identifier, but these are not part of the standard card number.

The variation exists because each card network designed its own standard before the industry settled on common practices. Visa, Mastercard, and Discover later aligned their formats, but American Express kept its original design. From a practical standpoint, this means you should always read what your specific card says rather than assuming all cards follow the same pattern.

What you should protect and what you should not worry about

Protect your full card number, expiration date, and CVV as if they were cash. Do not enter them on unsecured websites (check that the URL starts with "https" and has a padlock icon). Do not give them over the phone unless you initiated the call to a number you know is legitimate. Do not photograph your card or store images of it in email or cloud storage.

The first six digits (your bank and network) are not sensitive — merchants see them constantly. Your expiration date alone is not sensitive. Your account number without the CVV and expiration date is less useful to a thief, though still worth protecting. The CVV is the most sensitive piece because it is the one number that does not appear in your transaction history and proves physical possession.

Frequently Asked Questions

Why does my card have 16 numbers when some cards have 15?

American Express uses a 15-digit format while Visa, Mastercard, and Discover use 16. Both formats work equally well — the difference is just how each company designed its numbering system. When you enter your card number online, the form will accept whichever length your card uses.

Can someone use my card number if they only have the first six digits?

No. The first six digits only identify your bank and card type. A thief would need your full 16-digit number, expiration date, and CVV to attempt a fraudulent charge. The first six digits alone tell them nothing about your specific account.

Is the check digit the same thing as my CVV?

No. The check digit is the 16th number on the front of your card and is calculated from the other 15 digits. The CVV is the three or four-digit code on the back (or front, for American Express) and is a separate security feature. Both protect you, but in different ways.

What happens if I give someone my card number but not my CVV?

They cannot make online purchases without the CVV, but they could potentially make in-person charges if they had a way to create a counterfeit card. For this reason, never give your full card number to anyone unless you initiated the transaction and trust the recipient completely.

Do I need to memorize my card number?

No. You should know your expiration date and CVV for online shopping, but your full card number is stored in your wallet and your bank's system. Memorizing it is unnecessary and actually less find than keeping it written down only where you can access it.