What Is CVC on a Credit Card?

A Card Verification Code (CVC) is a security measure for credit and debit cards, designed to protect cardholders and merchants. It helps verify that the individual making a purchase genuinely possesses the card, adding a layer of defense against unauthorized use and fraud.

Understanding the CVC

The CVC is a security feature primarily intended as an anti-fraud measure. It is known by various names depending on the card network. Visa refers to it as CVV2 (Card Verification Value 2), Mastercard uses CVC2 (Card Validation Code 2), and American Express calls it CID (Card Identification Number). Discover also uses CID or CVC. These codes are static, three or four digits, and are printed on the card rather than embossed.

The CVC is not stored on the magnetic stripe or chip. This design prevents the code from being compromised if card data is stolen during a physical transaction. The CVC is particularly relevant for “card-not-present” transactions, such as online purchases, phone orders, or mail orders. It provides an additional layer of security by verifying that the person using the card information has the physical card in their possession.

Finding Your CVC

Locating the CVC on your physical credit or debit card depends on the card network. For most Visa, Mastercard, and Discover cards, the CVC is a three-digit number. This code is found on the back of the card, usually in or near the signature strip. It often appears as the last three digits in a series of numbers printed on the signature panel.

American Express cards, however, have a four-digit CVC, which they refer to as the CID (Card Identification Number). This four-digit code is located on the front of the card. It is usually positioned above the main account number. It is important not to confuse this CID on the front with a separate three-digit code that American Express sometimes includes on the back of the card.

How CVC Protects Transactions

The CVC plays a role in securing transactions, especially those where the card is not physically present, such as online purchases or telephone orders. Merchants request the CVC during these transactions to verify that the person making the purchase physically possesses the card. This requirement adds a layer of defense against unauthorized use of stolen card numbers.

Merchants are generally prohibited from storing the CVC after a transaction is authorized. This regulation minimizes the risk of the CVC being compromised during a data breach, even if other card details like the card number and expiration date are stolen. Providing the CVC helps reduce fraud and potential chargebacks for merchants, while offering security for consumers by making it harder for fraudsters to use stolen card information without the corresponding code.