A credit card has 15 or 16 digits printed on the front, plus additional numbers on the back and sometimes elsewhere
The long number running across the front of your card is called the primary account number, or PAN. It is almost always either 15 or 16 digits long, depending on which card network issued it. American Express cards typically have 15 digits. Visa, Mastercard, and Discover cards typically have 16 digits. This number is unique to your account and is the main identifier your bank uses to process charges.
The other numbers on your card each serve a specific purpose. The first digit or two identifies the card network — Visa cards start with 4, Mastercard with 5, American Express with 3, and Discover with 6. The next several digits identify your bank. The remaining digits, along with a check digit at the end, make up your account number. This structure lets payment processors instantly route your transaction to the right bank without looking anything up.
On the back of your card, you will find a three- or four-digit security code. American Express calls this the CID (Card Identification Number) and places it on the front; Visa, Mastercard, and Discover call it the CVV (Card Verification Value) or CVC (Card Verification Code) and place it on the back. This code is not stored in the magnetic stripe or chip, so it proves you physically have the card when you enter it during an online purchase.
Key Takeaways
- Your credit card's main number is 15 or 16 digits long and uniquely identifies your account to your bank.
- The first digit or two tell payment processors which card network (Visa, Mastercard, American Express, or Discover) issued the card.
- The three- or four-digit security code on the back (CVV or CVC) proves you have the physical card when you shop online.
- Your card's expiration date tells merchants and your bank when the card stops working, though your account itself may remain open.
- Never share your full card number, expiration date, or security code with anyone unless you initiated the transaction yourself.
The expiration date and what it actually controls
Your card displays a month and year, usually printed as MM/YY. This is the date when your physical card stops working — not the date your account closes. Your bank will typically send you a replacement card a few weeks before expiration, with a new number and a new expiration date.
Merchants and payment processors check this date to make sure the card is still valid. If you try to use an expired card, the transaction will be declined. However, recurring charges (like a subscription or automatic bill payment) may still process if your bank has updated the expiration date on file with the merchant. This is why you should update your payment information with any service you pay regularly, rather than waiting for the card to expire and hoping the charge goes through.
Why the card number is structured the way it is
The structure of your card number is not random. The first digit identifies the card network. The next five to seven digits identify your specific bank or credit union. The remaining digits form your unique account number within that bank's system. The very last digit is a check digit, calculated using a mathematical formula called the Luhn algorithm. This digit allows payment processors to instantly spot typos or fraud — if someone enters a card number with an incorrect check digit, the system rejects it before even contacting your bank.
This design means a payment processor can validate a card number's format in milliseconds, without needing to look up your bank's records. It also means that if you accidentally transpose two digits when entering your card number online, the transaction will fail immediately rather than going through and creating a dispute later.
Where your card number appears and where it should not
Your card number should appear only on your physical card, your bank's website or app, and your monthly statements. It should never appear in your email, text messages, or any unsolicited communication. If you receive an email or text claiming to be from your bank and asking you to confirm your card number, that is a phishing attempt — your bank already has your card number and will never ask for it this way.
When you make an online purchase, your card number is encrypted before it leaves your device. The merchant's website should show a padlock icon in the address bar, indicating a secure connection. Never enter your card number on a website that does not show this padlock or that has a URL starting with "http" rather than "https".
Your card number may also appear on receipts, but only the last four digits should be visible. If a receipt shows your full card number, that is a sign the merchant's system is not secure. Report this to your bank and consider whether you want to continue using that merchant.
What happens if someone gets your card number
If your card number is compromised, your bank's fraud protection means you are not liable for unauthorized charges. Federal law limits your liability to $50 if you report the fraud within 60 days of receiving your statement, and most banks waive even that $50. However, you still need to act quickly — call your bank as soon as you notice an unauthorized charge, and your bank will cancel the card and issue a replacement.
The security code on the back of your card is harder for a thief to use. If someone has only your card number and expiration date (from a data breach, for example), they cannot complete an online purchase without the security code. This is why merchants ask for it — it proves you have the physical card. If someone has your full card number, expiration date, and security code, they can make online purchases, which is why you should never share all three pieces of information with anyone.
How card numbers differ by card type
Most credit cards have 16 digits, but American Express is the major exception with 15 digits. This difference is not just cosmetic — it affects how the card number is structured and validated. American Express also places its security code on the front of the card rather than the back, and the code is four digits instead of three.
Debit cards follow the same numbering system as credit cards — they have 16 digits (or 15 for American Express), an expiration date, and a security code. The number structure is identical because debit cards run on the same payment networks as credit cards. The difference is in what happens behind the scenes: a debit card draws from your bank account immediately, while a credit card creates a charge your bank bills you for later.
Prepaid cards also use the same 15- or 16-digit format. From a merchant's perspective, a prepaid card looks identical to a credit or debit card. The difference is that you load money onto the card in advance, and the card can only be used up to the balance you have loaded.
Frequently Asked Questions
Is it safe to give my card number to a merchant over the phone?
It depends on whether you initiated the call. If you called the merchant to place an order, it is generally safe — you know you are talking to the right company. If a merchant called you unsolicited asking for your card number, hang up and call the company's official number to verify whether they actually need information from you. Never give your card number to someone who contacted you first.
What if I see charges I do not recognize on my statement?
Contact your bank immediately. Your bank will investigate and reverse any unauthorized charges. You are not responsible for fraudulent transactions if you report them within 60 days of your statement date. Keep the statement showing the charge and any documentation of your dispute, in case your bank needs it.
Can someone use my card number if they only have the first four digits?
No. The first four digits alone are not enough to make a purchase. A thief would need your full 16-digit number, expiration date, and security code to complete an online transaction, or they would need the physical card to use it in a store. Receipts that show only your last four digits are designed this way for security.
Why do some cards have numbers printed in different places?
Card networks and banks choose where to print the number for security and design reasons. American Express prints the number on the front and the security code on the front as well. Visa, Mastercard, and Discover print the number on the front and the security code on the back. Some newer cards print the number on the back only, to reduce the risk of someone seeing it over your shoulder.
Does my card number change if I get a replacement card?
Usually yes. When your bank sends you a replacement card due to expiration, fraud, or damage, the new card typically has a different 16-digit number. The exception is if your bank reissues the same number for convenience — this is rare. Check your new card when it arrives and update any recurring payments with the new number.