What is a CVV on a Debit Card and Where Can I Find It?

A CVV, which stands for card verification value, is a three or four-digit number found on most debit cards and credit cards. The length of a CVV depends on the type of debit card you have. Visa, Mastercard, and Discover use a three-digit CVV and American Express uses a four-digit CVV number.¹^,²

The CVV meaning and purpose is to protect your debit card from theft and fraud. When making a purchase online or over the phone, merchants will typically ask for your CVV to confirm you have the card with you. If you buy something in-store, the seller should not ask you to provide your CVV code, as this information transfers automatically when you swipe, insert, or tap your card.

Different card issuers refer to the CVV on credit cards and debit cards using various names, including:

• Card Security Code (CSC)
• Card Verification Number (CVN)
• Card Verification Data (CVD)
• Card Identification Number (CIN)

If you’re looking for your CVV, you can usually find it on the back of your debit card on the right-hand side of the signature strip. Some debit cards, such as American Express, print the CVV on the front side of the card above the American Express logo.

A CVV code helps prevent unauthorized transactions from occurring in card-not-present (CNP) transactions. For instance, using your debit card to pay for something online, by mail or by phone. By requesting the CVV code in a CNP situation, merchants can feel more confident that you have the physical debit card in your possession.

While merchants can store cardholder data like your name and card number, the PCI Data Security Standards Council prohibits the storage of CVV data.³ This means a merchant can ask for your CVV to authorize your transaction but must delete it once the transaction is complete.

If someone hacks into a retailer’s system, they can steal your credit card number, but they won’t have access to the CVV on your card. This safeguard makes it more difficult for them to use your card to make fraudulent purchases online.

There are two types of CVVs – CVV1 and CVV2.

CVV1

Your CVV is encoded in the magnetic stripe or the little chip on your debit card. When you buy something in-store, your CVV information is automatically shared.

CVV2

For card-not-present transactions over the phone or online, you can use the three or four-digit number on the back or front of your debit card. You will have to provide the security code on your card each time you make an online or phone purchase since merchants are not allowed to store CVV codes.

Some banks also use dynamic CVVs. This is a card verification code that continuously changes – there is no CVV printed on the card. Instead, you can request a text message or email with a new CVV when you want to make a purchase.

Alternatively, some cards have a small electronic screen on the back that displays the changing code.⁴ Like a regular CVV, the purpose is to make fraudulent purchases on a credit card or debit card more difficult.

To keep your debit card safe and avoid common scams, you need to protect your information, including your card number, expiration date, and CVV on your debit card. To keep your data secure, consider the following strategies:

• Review your bank statements regularly. Make a habit of checking your online bank statements regularly to scan for any unauthorized charges or withdrawals. If you notice something unusual, report it to your bank immediately.
• Don’t share your debit card details. Avoid sharing pictures or details of your debit card on social media, over text, or by email.
• Always use a secure Wi-Fi network. Don’t share personal or banking information when using public or non-secure networks.
• Password-protect your computer and mobile devices. Always password-protect your network to ensure no one can access your Wi-Fi network at home. Also, password-protect your computer, phone, or tablet to ensure no one can open it if it is lost or stolen.
• Only make purchases on secure websites. Only use websites that use “https” addresses versus “http” addresses. The extra “s” included in “https” addresses stands for secure.
• Use trusted sites. Choose online retailers that you trust. If you’ve never heard of a site, research it before sharing personal or debit card information.
• Install anti-virus software. You can install anti-virus software on your computer and mobile devices to scan for viruses and protect your information.
• Recognize phishing scams. Phishing is a type of digital attack where scammers try to collect your sensitive information via phone, text or another mode of communication. They often create a sense of fear or urgency so you’ll send your details quickly before realizing what’s going on. Learn more about what phishing is and how to avoid common phishing scams here.

Your CVV code acts as an extra layer of security on your debit card. When an online merchant asks for your CVV during checkout, they’re confirming that you have the physical card in your possession. This extra bit of information helps act as a safeguard against theft and fraud. For more tips on security, find out how to protect yourself from fraud and scams.