The CVV or CVC is a three- or four-digit security code printed on your credit card, separate from your card number
The CVV (Card Verification Value) or CVC (Card Verification Code) is a short number that card companies use to confirm you actually hold the physical card when you make an online or phone purchase. It is not stored in the magnetic stripe or chip on your card the way your account number is. The code sits by itself on the card's surface.
Most cards have a three-digit code. American Express cards have a four-digit code printed on the front, near your card number. Visa, Mastercard, and Discover cards have a three-digit code on the back, usually in or near the signature strip. Some debit cards also carry a CVV or CVC for the same reason.
The purpose is straightforward: if someone steals your card number but does not have the physical card, they cannot complete an online purchase without also knowing this code. It is a basic check that you are the person making the transaction.
Key Takeaways
- CVV and CVC are the same thing — a three- or four-digit security code printed on your card that proves you hold the physical card.
- Visa, Mastercard, and Discover print the code on the back; American Express prints it on the front.
- Never share your CVV or CVC with anyone who calls you or emails you, even if they claim to represent your bank.
- Legitimate merchants ask for the code only during checkout; your bank will never ask for it over the phone or email.
- If your card is lost or stolen, contact your card issuer immediately — the CVV alone cannot be used to make purchases without the card number.
Where to find your CVV or CVC
The location depends on your card type. On Visa, Mastercard, and Discover cards, flip the card over and look at the back. The three-digit code appears to the right of the signature strip, usually printed in a slightly raised or embossed format. On American Express cards, the four-digit code is on the front, printed above and to the right of your account number.
If you cannot see the code clearly, hold the card under good light or try a magnifying glass. The number should be easy to read once you know where to look. If your card is damaged and the code is worn away, you can contact your card issuer for a replacement card.
When merchants ask for your CVV or CVC
You will be asked to enter this code whenever you buy something online or over the phone without swiping or inserting your card. The merchant's payment system requires it before the transaction can go through. This is standard practice for any legitimate online retailer, airline, hotel, or subscription service.
The merchant sees the code only during that single transaction. They are not supposed to store it in their system — payment card rules forbid it. This means even if a retailer's database is hacked, the thief cannot pull your CVV from their records because it was never saved there.
What to do if someone asks for your CVV over the phone or email
Do not give it to them. Your bank will never call you and ask for your CVV. Legitimate merchants do not ask for it by email or phone — they ask for it only during the checkout process on their secure website or app. If someone contacts you claiming to be from your bank, a retailer, or a payment company and requests your CVV, it is a scam.
Hang up or delete the email immediately. If you are unsure whether the contact was real, call your card issuer directly using the number on the back of your card. Do not use a phone number from the email or call, because scammers sometimes spoof official numbers.
How CVV and CVC protect you
The code is a basic fraud prevention tool, not a complete security system. It stops someone who has only your card number — obtained through a data breach, a skimming device, or a photo — from making online purchases. Without the physical card, they cannot read the code.
However, the code does not protect you if someone steals the actual card. They will have both the number and the code. It also does not protect you if you give out both pieces of information yourself, whether by accident or because you were tricked. The code is one layer of security among many, including fraud monitoring by your card issuer and your right to dispute unauthorized charges.
The difference between CVV, CVC, and other card security terms
CVV and CVC are the same thing — different card companies use different names. Visa calls it CVV2, Mastercard calls it CVC2, and American Express calls it CID. Discover uses CID as well. For practical purposes, they all mean the same three- or four-digit code on your card.
This is different from your PIN (Personal Identification Number), which you create and use at ATMs and in-person at checkout terminals. Your PIN is secret and known only to you; your CVV is printed on the card itself. They serve different purposes and are used in different situations.
What happens if your card is lost or stolen
Contact your card issuer right away — most have a 24-hour fraud line listed on the back of your card or on your statement. Report the card as lost or stolen, and the issuer will cancel it and send you a replacement. Your new card will have a different CVV.
Once you report the card, you are not responsible for fraudulent charges made after that point. Your card issuer's fraud department will investigate any charges you did not make. In the meantime, you can use your account online or request a temporary card number for purchases while you wait for the replacement to arrive.
Frequently Asked Questions
Can someone use my card number without the CVV?
Not for online or phone purchases — the merchant's system will reject the transaction if the CVV does not match. However, someone with your card number and expiration date can attempt in-person fraud by creating a counterfeit card. This is why monitoring your statements and reporting lost cards quickly matters.
Is it safe to type my CVV into a website?
Yes, if the website is legitimate and uses encryption (look for "https://" in the address bar and a padlock icon). The code is transmitted securely and not stored. Never enter it on an unsecured website, and never type it into an email or text message.
What if I forgot my CVV?
Look at your physical card — it is printed right there. If you do not have the card with you, you can call your card issuer and they can read it to you over the phone after verifying your identity. Some card issuers also display it in your online account, though this varies by bank.
Do I need to memorize my CVV?
No. You only need it when you are making a purchase and do not have the card in front of you. For online shopping, you can look at the card as you enter the information. There is no reason to memorize it.
Can my CVV change?
Yes. Every time you get a new card — whether because yours expired, was lost, or was replaced due to fraud — the new card will have a different CVV. The code is unique to each physical card.