Credit card numbers have 13 to 19 digits, depending on the card type and issuer

Most credit cards issued in the United States have 16 digits printed on the front. Visa and Mastercard cards typically carry 16 digits. American Express cards have 15 digits. Discover cards have 16 digits. Some specialty cards, business cards, or cards from smaller issuers may have 13, 14, or 19 digits instead, though this is less common in everyday use.

The digits are not random. Each one serves a purpose in how the card works, how it is processed, and how fraud detection systems identify it. Understanding what these numbers represent can help you protect your card and recognize when something looks wrong.

Key Takeaways

  • Most U.S. credit cards have 16 digits, but American Express has 15 and some specialty cards may have 13, 14, or 19.
  • The first digit or first few digits identify the card network (Visa, Mastercard, American Express, or Discover).
  • The middle digits identify your specific bank or card issuer and your individual account.
  • The last digit is a check digit that helps detect errors or fraud when the card is swiped or entered online.

What the first digit tells you

The first digit of your credit card number identifies the card network or issuer type. Visa cards always start with 4. Mastercard cards start with 5. American Express cards start with 3 (specifically 34 or 37). Discover cards start with 6 (specifically 65). This first digit is called the Major Industry Identifier, or MII.

When you enter your card number online or swipe it at a terminal, the system reads this first digit to route your transaction to the correct payment network. If you type a number that starts with 4, the system knows to send it through Visa's network. This happens automatically and is one reason why entering the wrong first digit will cause a transaction to fail.

The issuer identification number and your account

The second through sixth digits (or sometimes the second through seventh) make up the Issuer Identification Number, or IIN. This tells the payment network which bank or credit card company issued your card. Chase, Bank of America, American Express, Discover, and hundreds of smaller banks and credit unions each have their own IIN codes.

The remaining digits after the IIN are your individual account number. This is the part that ties the card to your specific account at your bank. Two people can have cards from the same bank and the same network, but their account numbers will be different. This is how the payment system knows which account to charge when you use the card.

The check digit at the end

The last digit on your credit card is called the check digit or verification digit. It is calculated using a mathematical formula called the Luhn algorithm, which uses all the other digits on the card to generate this final number. The check digit does not represent any information about your account — it is purely a security and error-detection tool.

When you swipe your card or enter it online, the payment processor runs the Luhn algorithm on all the digits you provided. If the check digit does not match what the algorithm produces, the system knows something is wrong — either you mistyped a number, the card is damaged, or someone is trying to use a fake card number. This is why transposing even one digit will cause a card to be rejected.

Why different card types have different lengths

American Express uses 15 digits instead of 16 because it operates differently from Visa and Mastercard. American Express is both the card network and the issuer — they issue their own cards rather than licensing their brand to banks the way Visa and Mastercard do. This different business model means they use a different numbering structure.

Specialty cards, corporate cards, or cards from very small issuers may use 13, 14, or 19 digits. These are rare in consumer use but do exist. The variation exists because the payment industry allows flexibility in card number length as long as the card passes the Luhn check and the issuer's system can process it. Most merchants and online systems are built to accept cards between 13 and 19 digits for this reason.

What you should and should not share

Your full 16-digit card number should never be shared in email, text message, or over the phone unless you initiated the contact and you are certain you are speaking to your bank or a legitimate merchant. Criminals can use a full card number to make online purchases or create fraudulent accounts.

The last four digits of your card number are considered lower-risk information and are often used by banks and merchants to confirm your identity ("Is this the card ending in 4782?"). Your CVV or CVC code — the three-digit security number on the back of the card — should be treated as carefully as your full card number. Never enter your CVV on a website unless you are making a purchase, and never give it to someone who calls you.

How card numbers are used in fraud detection

Banks and payment networks use the structure of your card number to spot fraud. If a transaction comes in with a card number that fails the Luhn check, it is rejected immediately — no human review needed. If a transaction uses a card number that does not match the IIN for the bank that supposedly issued it, that is flagged as suspicious.

Your bank also monitors the pattern of where your card is being used. If your card number is used in a country you have never visited, or if multiple transactions appear in different cities within an impossible timeframe, your bank's fraud detection system will catch it and may freeze your card. This is why you might get a call or text asking you to confirm a purchase — the system detected something unusual about how your card number was being used.

Frequently Asked Questions

Is it safe to write down my credit card number?

Writing down your full card number and storing it anywhere — even in a locked drawer — creates a risk if that paper is lost or stolen. If you need to remember your card number, use your bank's app or online portal instead, which is encrypted. If you must write it down, never write the full number; write only the last four digits and keep it in a secure location.

Why do some websites ask for all 16 digits but others only ask for the last four?

Websites that process payments (like online stores) need your full card number to charge you. Websites that are just confirming your identity (like your bank's login page) only need the last four digits because that is enough to identify which card you are using without exposing the full number to unnecessary risk.

Can someone use my card if they only know the first six digits?

No. The first six digits identify your bank and card type, but they do not identify your specific account. Someone would need at least most of your full card number, plus the expiration date and CVV, to make a purchase. The first six digits alone are not enough to charge anything.

What does it mean if my card number starts with a digit I do not recognize?

Check your card issuer. If you have a Visa card but the number starts with 5 (Mastercard), contact your bank immediately — this could indicate a counterfeit or incorrectly printed card. Legitimate cards always start with the digit that matches their network.

Do debit cards have the same number of digits as credit cards?

Yes. Debit cards issued on the Visa or Mastercard network have 16 digits, just like credit cards on those networks. The number of digits depends on the network, not on whether the card is debit or credit. American Express debit cards have 15 digits, matching American Express credit cards.