What is a credit card security code?

Written by

Sarah Brodsky,

Edited by

Liliana Hall,

Reviewed by

Cathleen McCarthy,

Expert verified

Published on March 15, 2022 | 3 min read

Bankrate is always editorially independent. While we adhere to strict , this post may contain references to products from our partners. Here's an explanation for . The content on this page is accurate as of the posting date; however, some of the offers mentioned may have expired. Terms apply to the offers listed on this page. Any opinions, analyses, reviews or recommendations expressed in this article are those of the author’s alone, and have not been reviewed, approved or otherwise endorsed by any card issuer. Our is to ensure everything we publish is objective, accurate and trustworthy.

WAYHOME studio/Shutterstock

Man paying bill with credit card and phone

If you’ve ever purchased anything online or over the phone and paid with a credit card, you’ve probably been asked for your card’s security code. This is a short series of digits found on your physical card that’s different from your credit card number. Providing this code gives some extra assurance that the card is in your possession and that your payment information isn’t being used fraudulently.

What is a credit card security code?

A credit card security code is a three- or four-digit code that’s unique to your card. It’s called the Card Verification Value (CVV), Card Verification Code (CVC) or Card Identification Number (CID), so you might hear the security code referred to as the CVV code, CVV number or CVC number.

This number is printed on your card and can’t be found through your online credit card account or on any of your credit card documents. Because this code is located only on your physical card, merchants ask for the code when your card isn’t present to verify that you have the card in hand.

Merchants aren’t allowed to store credit card security codes after they complete transactions. So while thieves might be able to steal credit card numbers if they hack into a retailer’s electronic records, they shouldn’t be able to access the security codes.

How to find your security code

Here’s where you can usually find your credit card’s security code, depending on which network your card is in. The layout can vary a little by issuer and card, though, so if you don’t find the code where you expect it to be, keep looking for an unembossed three- or four-digit number.

American Express: Four digits on the front of the card, on the right-hand side above the card number
Mastercard and Visa: Three digits on the back of the card at the right end of the signature field
Discover: Three digits on the back of the card, in a box to the right of the signature field

Credit card security code locations on different cards — Orli Friedman/Bankrate

When do you need your card’s security code?

You often need your credit card security code when you buy something online or by phone. Not every merchant asks for the code in these cases, but many require it for additional security.

You also generally need the security code the first time you provide your credit card information to a mobile payment app like Apple Pay or Google Pay, but you don’t need to give the code each time you pay for something with the app.

You don’t need to enter your security code when you pay in-person at a card terminal. And if you allow a retailer to keep your card information on file and to charge future purchases to your card, you don’t have to provide the security code for each following transaction.

Why credit card security codes are important

Security codes provide an extra layer of protection when it comes to keeping your credit card information secure and private. As we mentioned previously, merchants are prohibited from storing personal CVV data. So if you are asked to verify your security code, the merchant is simply working to ensure you have the card in hand. Because this data is never stored, falling victim to fraud is more difficult, although not impossible.

How to keep your card information secure

Requiring customers to give their credit card security codes when they make a purchase can protect against fraud, but the codes must be known only to cardholders for this security feature to work. It’s important to guard your credit card information, including security codes, carefully:

Don’t lend your credit card to other people or leave it in a public place.
Verify that websites are secure before shopping online. Check that the website address begins with “https” and that a lock icon appears next to the URL.
Don’t enter credit card information at a public computer or over public Wi-Fi networks.
Don’t give out credit card information to anyone who’s called you on the phone—even if the caller ID looks right. Scammers can manipulate caller ID. If you want to pay for something by phone, you should call the merchant yourself.
Make sure your card isn’t visible in any photos you post online.
If you store credit card information on your phone, set your phone to lock promptly when not in use, and protect it with a strong passcode or biometric authentication.
Take advantage of any security services your credit card issuer offers, such as notifications for unusually large transactions or suspicious account activity.
If you believe your account information may have been compromised, tell your card issuer right away so it can send you a new card.