Where Is the Security Code on a Credit Card?

Your credit card's security code is a short string of digits printed — not embossed — on your card. It exists specifically to prove you physically have the card in your hand during online or phone transactions. But where exactly that code appears, and what it's called, depends on the network that issued your card.

What Is a Credit Card Security Code?

The security code is a 3- or 4-digit number used to verify card-not-present transactions — purchases where you're entering card details online or over the phone rather than swiping or tapping in person.

Because it's printed rather than embossed or stored in the magnetic stripe, it's harder for thieves to capture through skimming devices. Merchants who accept card-not-present payments are generally required by payment networks to request this code, adding a layer of authentication beyond just the card number and expiration date.

You'll hear it called different things depending on who's asking:

These all refer to the same concept — a verification number tied to your specific card — just branded differently by each network.

Where to Find the Security Code by Card Type

Visa, Mastercard, and Discover 🔍

For these three networks, the security code is 3 digits and appears on the back of the card, printed in or near the signature panel. It's usually positioned to the right of the card number (or the last four digits of the card number, which may be reprinted there for reference).

Look for a small box or space just after the signature strip. The 3-digit number sits on its own — it's not part of the longer card number.

American Express

Amex does things differently. The security code is 4 digits and appears on the front of the card, printed above and to the right of the embossed card number. It's typically smaller than the main card number and isn't embossed — it's flat ink on the card surface.

Because Amex's code is on the front and longer than the standard 3-digit codes, it trips people up more often. If a checkout form asks for a 4-digit CVV and you have an Amex, look at the front of the card.

Why It's Separate From Your Card Number

The security code is intentionally not encoded in the magnetic stripe or chip. This is by design. When you swipe or tap in person, merchants can verify your card through the chip or stripe — the code isn't transmitted or stored during those transactions.

For online purchases, merchants are only supposed to use the code to verify a transaction, and most payment card industry rules prohibit storing it after authorization. That means even if a retailer's database is breached and card numbers are exposed, the security code shouldn't be in that data — making stolen numbers harder to use for card-not-present fraud.

This also means if someone asks you for your security code outside of a legitimate checkout process, that's a red flag. Banks and card issuers will not ask for your CVV over email or text.

Virtual Cards and Digital Wallets 🔐

If you use a virtual card number — a temporary card number generated by your issuer or browser — it comes with its own security code that's separate from your physical card's code. This is intentional: virtual numbers are designed to be disposable or limited in use, so the associated CVV is unique to that number.

With digital wallets like Apple Pay or Google Pay, the card's actual security code isn't transmitted to merchants at all. These services use tokenization, replacing your real card details with a one-time transaction token. In practice, you rarely need to enter a CVV when paying through a digital wallet.

Common Situations Where You'll Need It

• Online shopping: Nearly every checkout form will ask for the CVV as a required field alongside the card number and expiration date.
• Recurring subscriptions: Some services request it when setting up billing. After that, they typically don't store or re-request it.
• Phone orders: If you're giving card details to a customer service representative, they'll usually ask for the security code as part of standard verification.
• Adding a card to an account: Many platforms request the CVV when you first save a card on file.

What to Do If Your Security Code Is Worn Off

Physical wear can sometimes make the printed digits difficult or impossible to read. Because the code is printed rather than embossed, it can fade with heavy use.

If you can't make out your security code, the right move is to contact your card issuer directly and request a replacement card. Issuers don't provide the code over the phone or through online banking portals for security reasons — the code is only on the physical card itself, which is the point.

Some issuers may be able to expedite a replacement card if you need it quickly.

The Bigger Picture on Card Security

Knowing where your security code lives is useful, but it's just one piece of how card security works. The code works alongside your card number, expiration date, billing address verification (AVS), and in some cases, two-factor authentication from your bank to confirm that a transaction is legitimate.

Understanding which code goes where — and why Amex puts it on the front while everyone else puts it on the back — means you won't be caught searching the wrong side of your card at checkout. But how your card issuer handles fraud protection, zero-liability policies, and replacement timelines varies by card and issuer, and those details live in your specific cardholder agreement.