Those three little digits on the back of your card have an outsized job: they help prove that you, and not a thief with a stolen card number, are making a purchase. Knowing what the CVV is and how to guard it can save you from card fraud. Our GetMyPassword team explains what a CVV is, what it does, and how to protect it.
What a CVV is
The CVV (Card Verification Value) is the three-digit code on the back of your card — four digits on the front for American Express. It is not part of your card number and is not stored in the magnetic stripe or chip. Its whole purpose is to prove, during an online or phone purchase, that the person paying physically has the card in hand.
Why it matters
Because the CVV is not embossed or stored like the card number, a thief who skims your card details or buys them from a breach often does not have the CVV. That single missing code can block a fraudulent online purchase. It is a small but meaningful barrier — which is exactly why scammers work so hard to trick you into revealing it.
How to protect your CVV
- Never share it by email, text or phone — no legitimate company asks for it that way.
- Do not store it: reputable sites are not allowed to save your CVV, so a site that “remembers” it is a red flag.
- Watch for phishing forms and calls that ask for the code “to verify” your card.
- Cover it when paying in person, and consider scratching it off after memorizing it.
Your card number can sit in a dozen databases, but your CVV should live only on your card and in your memory. The moment someone asks for it by phone or email, you are talking to a scammer.
Protect the accounts that hold your card
Guarding the CVV is only half the job; the accounts where your card is saved matter just as much. Give each shopping and payment account a unique password from our password generator and turn on two-factor authentication. And for extra safety online, consider a virtual card with its own number for purchases. Together these keep your real card details — CVV included — out of the wrong hands.
Frequently asked questions
What is a CVV number?
It is the three-digit security code on the back of your card (four digits on the front for American Express). It proves during online or phone purchases that the buyer physically has the card, and it is not stored in the chip or stripe.
Should I ever share my CVV?
Only by entering it yourself on a trusted checkout page. Never give it out by email, text or phone — no legitimate company will ask for your CVV that way, so any such request is a scam.
Can a website save my CVV?
Reputable merchants are not permitted to store your CVV, even if they save your card number for convenience. A site that keeps your CVV on file is a warning sign worth avoiding.