Where Is the Security Code on a Credit Card?

You've probably been asked for it dozens of times — at checkout, over the phone, or when buying something online. But if you've ever flipped your card over and wondered exactly what you're looking at, you're not alone. The security code on a credit card is a small number with a straightforward location — but where it lives depends on which card you're holding.

What Is a Credit Card Security Code?

A credit card security code is a short numeric code printed on your card that acts as a verification tool. It's designed to confirm that whoever is entering your card details actually has the physical card in hand — not just a stolen card number.

These codes go by several names depending on your issuer:

• CVV — Card Verification Value (Visa)
• CVC — Card Verification Code (Mastercard)
• CID — Card Identification Number (Discover and American Express)
• CSC — Card Security Code (general term)

Regardless of the name, they all serve the same purpose: an extra layer of fraud protection, especially for transactions where the card isn't physically swiped.

Where to Find the Security Code on Most Cards 🔍

Visa, Mastercard, and Discover: Back of the Card

For the vast majority of credit cards — including all Visa, Mastercard, and Discover cards — the security code is a 3-digit number located on the back of the card.

Look at the signature strip (the white or gray horizontal band). Your security code will appear either:

• At the end of the signature strip, printed in smaller type after the last few digits of your card number
• In a separate box just to the right of the signature strip, depending on the card design

The digits immediately before it are typically the last four digits of your full card number — so you'll see something like **** 1234 567, where 567 is the CVV/CVC. Only the final three digits (in that separate cluster) are your security code.

American Express: Front of the Card ⚠️

American Express is the exception. Amex cards use a 4-digit security code, and it's printed on the front of the card, not the back.

Look above and to the right of your card number, usually on the right side of the card face. It's a small cluster of four numbers, not embossed — just flat-printed.

This is a common point of confusion. If a form asks for a 3-digit code and you're holding an Amex, you'll need to enter all four digits instead.

Quick Reference: Security Code by Card Network

Why You're Asked for It — and Why It Matters

Merchants and payment processors request your security code for card-not-present transactions — meaning any purchase where you don't physically tap, swipe, or insert your card. This includes online shopping, phone orders, and some app-based purchases.

Here's the key point: your security code is not stored on the magnetic stripe or chip. It's also not included in most data breaches that expose card numbers, because merchants who follow payment security standards aren't allowed to store it after a transaction is complete.

That means even if someone gets your 16-digit card number from a breach, they typically still can't complete an online transaction without the security code — which is why having it printed on the physical card matters.

What If Your Security Code Is Worn Off?

The codes are printed flat (not embossed), which means they can fade with heavy use or wallet wear. If yours is no longer readable:

• Contact your card issuer directly. They can confirm your code over the phone after verifying your identity, or issue you a replacement card.
• Don't try to guess it. Most payment systems will lock after a small number of incorrect attempts to prevent brute-force fraud.

A worn security code is a legitimate reason to request a new card, and most issuers process replacement cards quickly.

Common Misconceptions Worth Clearing Up

"The security code is the same as my PIN." No. Your PIN is a separate 4-digit number used for in-person chip transactions and ATM withdrawals. Your CVV/CVC/CID is only for verification — never entered at a physical terminal.

"Giving out my security code is safe anytime someone asks." Be selective. Legitimate merchants and their payment platforms will ask for it at checkout. If someone calls you unexpectedly and asks for your security code, treat that as a red flag — your bank will never ask for it this way.

"The security code adds a layer the chip doesn't." Actually, chip transactions don't require the security code at all — the chip generates its own one-time cryptographic code for each transaction. The CVV/CVC is specifically a tool for remote, card-not-present purchases.

The One Variable That Changes Everything

The location of your security code is fixed by card network — that part is simple. But how well that code protects you depends entirely on how you use it: where you enter it, who you share it with, and whether you've spotted signs that your card's physical information may have been compromised.

Your card's security features are only as strong as the habits built around them — and those habits look different depending on how and where you use credit most. 🔒