CVV Format Example: 3 or 4 Digits, Where to Find It

A CVV format example is a 3-digit number printed on the back of most payment cards, such as 482, or a 4-digit number printed on the front of an American Express card, such as 1234. The code is never embossed, so it does not appear in a card imprint, and it is not encoded in the magnetic stripe or the chip. Its only job is to prove that the person paying has the physical card in hand.

CVV Format Specification: Digits and Placement by Network

How many digits does a CVV have?

The length depends on the card network, not on the bank that issued the card.

related article

• Visa, Mastercard, Discover, and most debit cards: 3 digits on the back, in the signature panel.
• American Express: 4 digits on the front, above and to the right of the card number.
• UnionPay and some regional cards: 3 digits on the back in the same spot as Visa and Mastercard.

So a card that shows CVV 482 in the signature strip follows the 3-digit pattern, while a card that shows CID 1234 on the front follows the 4-digit pattern.

read more

Where is the CVV printed on a card?

On a Visa, Mastercard, or Discover card, look at the white signature panel on the back. The CVV is the last 3 digits printed there, usually right after the last 4 digits of the card number.

On an American Express card, the code sits on the front of the card, just above the final digits of the account number. It is printed flat, not raised, so it will not show up on a rubbing or an old carbon copy.

Is a CVV the same as a PIN or the card number?

No. The card number is the long 15 or 16 digit account identifier, and it is embossed on the front of the card.

A PIN is a secret you choose and enter at an ATM or terminal, and it is never printed on the plastic. A CVV is printed on the card, cannot be changed by the cardholder, and is used mainly for online and phone purchases.

Why do online stores ask for the CVV?

Card networks treat the CVV as a verification value. A merchant sends it with the authorization request, and the issuer checks that it matches the code on file for that account.

A mismatch usually causes a decline, which is why a card number alone is not enough to complete an online order. Merchants are also barred from storing the CVV after a transaction is authorized, so it cannot be replayed later from a database.

How should you protect your CVV?

Treat the code like a password. Anyone who has your card number, expiration date, and CVV can attempt a card-not-present purchase.

1. Never read the code aloud to an unsolicited caller who claims to be from your bank or a utility.
2. Do not type it into a page you reached from a text message or pop-up ad.
3. Cover the back of the card when paying at a counter or handing it to a server.
4. Check your statements for small test charges, which often come before larger ones.

No legitimate cardholder ever needs to obtain a CVV from a third party, because the code is printed on their own card. Anyone offering to supply CVV numbers for a fee is handling stolen account data, and using or reselling those numbers is card fraud with criminal penalties.

What does a CVV format example look like in a checkout form?

Most checkout pages show a small box labeled CVV, CVV2, CVC, or CID, sized for 3 or 4 characters. The box is almost always near the expiration date field, and it usually accepts digits only.

If a form rejects a 4-digit entry, it is likely built for the 3-digit back-of-card format. If it rejects a 3-digit entry, the site may be coded for American Express cards only.