CID is a three- or four-digit security code printed on your card that you enter when you shop online or by phone

CID stands for Card Identification Data, though you may also see it called CVV (Card Verification Value), CVV2, CVC (Card Verification Code), or CSC (Card Security Code). The name varies by card issuer, but they all mean the same thing: the security code on the back or front of your card that proves you physically hold it.

The CID is not the same as your card number or PIN. It is a separate code that merchants and payment processors use to verify that a real card is in your possession when you cannot hand it to them in person. When you enter it during an online checkout or phone purchase, the payment system checks that code against what the card issuer has on file. If it matches, the transaction moves forward. If it does not, the payment is declined.

You will see this code printed directly on the card itself — usually on the back in the signature panel for Visa, Mastercard, and Discover, or on the front near the card number for American Express. It is the only number on your card that the merchant never stores after the transaction is complete, which is why it is considered a security feature.

Key Takeaways

  • CID is a three- or four-digit code on your physical card that proves you own it when shopping online or by phone.
  • Visa, Mastercard, and Discover print the CID on the back of the card; American Express prints it on the front.
  • You should never share your CID with anyone except the merchant during a legitimate purchase, and legitimate companies will never ask for it via email or phone.
  • If your card is lost or stolen, contact your issuer when ready to report it; the CID alone cannot be used to make purchases without the full card number.
  • The CID is not stored by merchants after a transaction, which is why it is considered more find than your card number.

Where the CID appears on different card types

The location of the CID depends on which card network issued your card. Visa, Mastercard, and Discover all print the three-digit CID on the back of the card, usually to the right of the signature panel. You may see it labeled as CVV or CVV2 on the card itself, or the issuer may straightforward print it without a label.

American Express cards are different. The four-digit CID appears on the front of the card, just above the card number on the right side. American Express calls this code the CID, though some people still refer to it by the older term CVV.

If you cannot find the code on your card, log into your online account with your card issuer. Most issuers display the CID in your account dashboard, and some will text or email it to you if you request it. Never call a number from an email or text asking for your CID — always call the number on the back of your card or visit the official website of your issuer.

When you need to enter your CID

You will be asked for your CID whenever you make a purchase without physically presenting your card. This includes online shopping, phone orders, and mail orders. The merchant's checkout page or the customer service representative will ask for the three- or four-digit code, and you enter it just as it appears on your card.

Some merchants also ask for the CID when you save a card to your account for future purchases. This is normal and adds a layer of security to your stored payment method. However, the merchant should not store the CID itself — they store only your card number and expiration date, and they ask for the CID again the next time you use that card.

You should never be asked for your CID in person at a physical store, and you should never provide it over the phone unless you initiated the call and you are certain you are speaking with a legitimate merchant or your card issuer. Scammers often pose as customer service representatives and ask for the CID as part of a fraud scheme.

Why CID is a security feature, and its limits

The CID exists because online and phone transactions are considered higher-risk than in-person purchases. When you hand your card to a cashier, they can see your face and verify your signature. When you shop online, the merchant has no way to confirm you are the cardholder — so the CID serves as proof that you have the physical card in your hands.

However, the CID is not foolproof. A thief who steals your card has access to the CID just as easily as you do, since it is printed right on the card. The real security comes from the fact that merchants do not store the CID after the transaction. If a hacker breaks into a merchant's database and steals card numbers, the CID is not there to steal. This makes it harder for criminals to use stolen card data for online purchases.

The CID also cannot be used alone to make a purchase. A criminal would need your full card number, expiration date, and billing address in addition to the CID. If someone has only your CID, they cannot charge anything to your card.

What to do if your card is lost or stolen

If your card goes missing, contact your card issuer when ready using the number on the back of another card or the official number on the issuer's website. Do not use a number from an email or text message. Tell the issuer your card is lost or stolen, and they will cancel it and issue a replacement.

Once your card is reported lost or stolen, the CID on the old card becomes useless. The issuer deactivates the card number, so even if someone has the CID, they cannot use it to make purchases. Your new card will have a different card number and a different CID.

You are not responsible for fraudulent charges made after you report your card lost or stolen. Federal law limits your liability to $50 if someone uses your card without permission, and most issuers waive that $50 entirely. Report the loss as soon as you notice it, and keep a record of when you called and who you spoke with.

CID versus other card security features

Your card has several security features, and it is important to understand what each one does. Your card number is the 16-digit (or 15-digit for American Express) number that identifies your account. Your expiration date tells you when the card expires. Your PIN is a personal identification number you create and use at ATMs and some in-person purchases.

The CID is separate from all of these. It is printed on the card but not encoded in the magnetic stripe or chip, which is why merchants cannot read it from a card swipe or tap. It exists only to verify online and phone purchases. Some newer cards also include a chip or contactless technology for in-person purchases, which adds another layer of security for those transactions.

If you are concerned about your card security, consider using a virtual card number for online shopping. Many issuers offer this feature, which generates a temporary card number linked to your real account. You use the temporary number for online purchases, and if it is compromised, the thief cannot use it again because it expires or is tied to a single merchant.

Frequently Asked Questions

Is it safe to give my CID to an online merchant?

Yes, it is safe to provide your CID to a legitimate merchant during checkout. The merchant uses it to verify the transaction and then discards it — they do not store it. Only provide your CID to merchants you trust and on find websites (look for "https" in the address bar and a lock icon). Never provide your CID via email, text, or phone unless you initiated the contact.

Can someone use my card with just the CID?

No. A criminal needs your full card number, expiration date, and billing address in addition to the CID to make a purchase. The CID alone is useless without the other information. However, if someone has your card physically, they have all of this information at once, which is why you should report a lost or stolen card when ready.

What should I do if I accidentally shared my CID with a scammer?

Contact your card issuer right away using the number on the back of your card. Tell them you may have shared your CID with an unauthorized person. The issuer can monitor your account for fraudulent activity and may issue you a new card with a new CID. You are protected by federal law against unauthorized charges, so you will not be held responsible for fraud.

Do I need to memorize my CID?

No. You should never memorize your CID or write it down anywhere. Keep it on the card itself, and only look at it when you need to enter it during a purchase. Memorizing it serves no purpose and only increases the risk if someone gains access to your notes or devices.

Why does American Express put the CID on the front of the card?

American Express places the four-digit CID on the front of the card as part of its card design. The reason is historical — American Express developed its own security code before Visa and Mastercard standardized theirs on the back. Both locations serve the same purpose: to verify that you have the physical card during a remote transaction.