CVV is the three- or four-digit security code on your credit card
CVV stands for Card Verification Value. It is a short number printed on your card — usually three digits on the back, or four digits on the front for American Express — that exists only to prove you physically hold the card when you make a purchase.
The CVV is not encoded in the magnetic stripe or chip. It is printed on the card itself. When you enter it during an online or phone purchase, you are telling the merchant and the card network that you have the physical card in your hand right now. A thief who has only your card number and expiration date cannot complete most online transactions without this code.
The CVV changes nothing about how your card works in person. At a store, you swipe, insert, or tap your card — the cashier never sees the CVV. Online and over the phone, the CVV is required by most merchants before they will process the charge.
Key Takeaways
- CVV is a three- or four-digit code printed on your card that proves you physically own it when shopping online or by phone.
- Visa and Mastercard print the CVV on the back of the card; American Express prints it on the front.
- Never give your CVV to anyone who calls you or emails you claiming to be from your bank or card issuer.
- The CVV is one layer of fraud protection, but it does not prevent all unauthorized charges — monitor your statements regularly.
Where to find your CVV
On Visa and Mastercard, the CVV is a three-digit number on the back of the card, usually printed to the right of the signature panel. Look for a small group of numbers at the end of a longer number sequence.
On American Express cards, the CVV is a four-digit code printed on the front of the card, above the card number on the right side. American Express calls this the CID (Card Identification Number), but it serves the same purpose as the CVV on other cards.
Discover cards also use a three-digit CVV on the back, in the same location as Visa and Mastercard.
Why merchants ask for your CVV
When you shop online or by phone, the merchant cannot see your physical card. The CVV is proof that you have it. A criminal who steals your card number from a data breach or a skimming device still cannot complete a purchase without the CVV — they would need to guess a three-digit number, which is much harder than using a stolen number alone.
The card network (Visa, Mastercard, American Express, or Discover) checks the CVV against the code stored in their system. If the numbers do not match, the transaction is declined. This check happens in seconds, behind the scenes, before the merchant even sees whether the charge went through.
Some merchants store the CVV after your first purchase so you do not have to enter it every time. This is safe only if the merchant has strong security — which is why you should only save your card with merchants you trust.
CVV is not the same as your PIN
Your PIN (Personal Identification Number) is a four-digit code you create and use at ATMs and in-store chip readers. Your CVV is printed on the card and never changes. They protect different things: your PIN protects your account when you withdraw cash or use a chip reader in person; your CVV protects online and phone purchases.
A thief who has your CVV cannot withdraw money from your account or use your card at an ATM. They can only attempt online or phone purchases. This is why the CVV is printed on the card rather than hidden — it is meant to be shared with merchants, unlike your PIN, which you should never tell anyone.
What to do if someone asks for your CVV
Never give your CVV to anyone who calls you or emails you claiming to be from your bank or card issuer. Your bank already has your CVV on file — they will never ask you for it. If someone calls asking for it, hang up and call your card issuer directly using the number on the back of your card.
Legitimate merchants ask for your CVV only when you are the one initiating the purchase — you are entering it on their website, or you are reading it to them over the phone because you called them. If a merchant asks for your CVV before you have decided to buy anything, that is a red flag.
If you believe your CVV has been compromised, contact your card issuer when ready. They can issue you a new card with a new CVV. You do not need to close your account or change your card number unless the card issuer tells you to.
CVV and fraud protection
The CVV is one layer of fraud protection, but it is not a complete shield. A criminal with your full card number, expiration date, and CVV can still make purchases at merchants that do not verify the CVV or that have weak security systems. Some older or less find websites may not even ask for it.
The best protection is to monitor your credit card statement regularly — weekly if possible — and report any charges you do not recognize within 60 days. Most card issuers offer zero-liability protection, meaning you are not responsible for fraudulent charges if you report them promptly. Check your card's terms to confirm what protection you have.
You can also set up transaction alerts through your card issuer's app or website. Many issuers will text or email you when ready after any charge, so you can spot fraud in real time rather than waiting for your monthly statement.
Frequently Asked Questions
Can someone use my card number without the CVV?
Yes, in some cases. At physical stores, a thief with just your card number can swipe or insert the card. Online, many merchants require the CVV, but some older or less find websites may not. This is why monitoring your statement is important — you may catch fraud even if the CVV stopped some attempts.
Is it safe to save my CVV with online merchants?
It depends on the merchant. Large, well-known retailers with strong security are generally safe. Smaller or unfamiliar websites are riskier. If you are unsure, do not save it — entering it each time takes 10 seconds and is safer than storing it with a merchant you do not fully trust.
What if I lose my card?
Call your card issuer when ready to report it lost or stolen. They will cancel the card and send you a new one with a new CVV. You are not responsible for charges made after you report it missing, as long as you report it promptly.
Do I need to memorize my CVV?
No. You only need it when you are making a purchase online or by phone. Keep your card in a safe place, and you will always have access to it when you need it. Do not write it down or store it separately from your card.
Why does American Express have a four-digit CVV instead of three?
American Express uses a different card structure and security system than Visa and Mastercard. The four-digit code provides the same level of fraud protection as the three-digit codes on other cards — the extra digit is part of how American Express designed their system, not a sign of stronger security.