Credit cards have 13 to 19 digits, depending on the card type and issuer
The number on the front of your credit card is called the Primary Account Number (PAN), and it's the main identifier that links the card to your account. Most cards issued today have 16 digits, but American Express cards have 15, and some specialty cards or older cards may have 13, 14, or 19 digits. The exact length depends on which bank issued the card and which payment network (Visa, Mastercard, American Express, Discover) processes the transactions.
The digits aren't random. Each one serves a purpose: some identify the card issuer, some identify you as the cardholder, and one is a check digit that prevents fraud. Understanding what these numbers mean can help you spot counterfeit cards, verify you've entered your number correctly, and understand what information you're sharing when you use your card online or over the phone.
Key Takeaways
- Most credit cards have 16 digits, but American Express has 15, and some cards have 13, 14, or 19 digits depending on the issuer.
- The first digit or two identify the card network (Visa starts with 4, Mastercard with 5, American Express with 3, Discover with 6).
- Digits 2 through 6 identify the bank or financial institution that issued the card.
- The last digit is a check digit calculated using the Luhn algorithm, which helps detect entry errors and fraud.
- You should never share your full card number with anyone except the merchant or payment processor you're paying, and never via email or text.
What each section of digits represents
The card number breaks down into four distinct sections, each with a specific job. The first digit (or sometimes first two digits) identifies the payment network. Visa cards start with 4, Mastercard with 5, American Express with 3, and Discover with 6. This tells the merchant's payment system which network to route the transaction through.
The next four or five digits (digits 2 through 6) identify the specific bank or financial institution that issued your card. This is called the Issuer Identification Number (IIN) or Bank Identification Number (BIN). When you swipe or insert your card, the payment terminal reads these digits to know which bank to contact to verify the transaction.
The middle digits (roughly digits 7 through 15, depending on card length) are your unique account number. This is the part that ties the card to your specific account and distinguishes your card from every other card issued by the same bank. Two people with cards from the same bank will have the same first six digits but different account numbers.
The last digit is the check digit, calculated using a mathematical formula called the Luhn algorithm. This digit allows payment systems to verify that the number you entered is valid before even contacting your bank. If you mistype a digit, the check digit won't match, and the system will reject the number immediately. This catches most typos and prevents some types of fraud.
Why card length varies by issuer
American Express uses 15 digits instead of 16 because it operates differently from Visa and Mastercard. Amex is both the card issuer and the payment network, so it doesn't need as many digits to identify a separate bank. Visa and Mastercard are networks that work with thousands of different banks, so they need more digits to distinguish between all those issuers.
Some older cards or specialty cards (corporate cards, prepaid cards, or cards from smaller institutions) may have 13, 14, or 19 digits. The variation exists because the payment networks allow flexibility in how many digits an issuer uses, as long as the first digit identifies the network and the last digit is a valid check digit. A 19-digit card is rare but valid; it simply means the issuer allocated more digits to the account number section.
How the Luhn algorithm protects you
The check digit at the end of your card number is generated using the Luhn algorithm, a mathematical formula that catches most accidental errors. Here's how it works: the payment system doubles every second digit (starting from the right), subtracts 9 from any result over 9, adds all the digits together, and checks whether the total is divisible by 10. If it is, the number is valid; if not, it's rejected.
This system catches about 99% of single-digit typos and transposed digits. If you accidentally type 4532015112830366 instead of 4532015112830366, the check digit won't match, and the payment processor will reject it before it ever reaches your bank. This saves time, reduces failed transactions, and makes it harder for someone to guess a valid card number by trial and error.
What you should never share
You should share your full 16-digit card number only with merchants you trust or payment processors you're paying directly. Never share it via email, text message, or phone call unless you initiated the contact and you're certain you're speaking to the legitimate company. Legitimate companies will never ask for your full card number via email or unsolicited phone call.
The card number itself is not enough to make a purchase online — most merchants also require the expiration date and the three-digit CVV (card verification value) on the back. Together, these three pieces of information can be used to make fraudulent purchases. If someone has only your card number, they still can't use it without the expiration date and CVV, which is why those are asked for separately.
How to verify your card number is correct
If you're entering your card number online or over the phone, you can do a quick sanity check using the Luhn algorithm, though most payment systems will do this for you automatically. The easiest method is to count the digits: if you have a Visa, Mastercard, or Discover card, you should have exactly 16 digits. If you have an American Express card, you should have exactly 15. If the count doesn't match, you've either mistyped or you're looking at the wrong card.
You can also check that the first digit matches the card network: Visa starts with 4, Mastercard with 5, American Express with 3, Discover with 6. If your Visa card number starts with 5, something is wrong. Most payment processors will catch these errors and tell you the number is invalid, but catching it yourself first saves time and reduces the chance of a declined transaction.
Frequently Asked Questions
Why does my American Express card have 15 digits instead of 16?
American Express is both the card issuer and the payment network, so it doesn't need as many digits to identify separate banks the way Visa and Mastercard do. Amex uses 15 digits because it has fewer issuers to distinguish between. The 15-digit format is standard for all American Express cards.
Can someone use my card number if they only have the 16 digits?
Not easily. Most online purchases and phone orders also require your expiration date and the three-digit CVV on the back of the card. In person, the merchant can verify your signature or ask for ID. The card number alone is not enough to make a purchase, though it is sensitive information and should still be kept private.
What's the difference between the card number and the CVV?
The card number (the 16 digits on the front) identifies your account. The CVV (the three digits on the back) is a security code that proves you physically have the card in your hand. Merchants ask for both to verify you're the legitimate cardholder. The CVV is never stored after a transaction, so it's harder for thieves to use a stolen card number.
If I mistype one digit, will the payment go through?
No. The payment processor will reject it immediately using the Luhn algorithm check digit. The system verifies the number is mathematically valid before it ever contacts your bank. This is why you'll see an "invalid card number" error if you make a typo, rather than the payment being declined by your bank.
Do all credit cards have the same number of digits?
No. Most Visa, Mastercard, and Discover cards have 16 digits, but American Express has 15. Some specialty cards, corporate cards, or older cards may have 13, 14, or 19 digits. The variation depends on the issuer and the payment network, but all valid card numbers follow the Luhn algorithm check.