What a Credit Card CID Is and Why It Matters
A CID is a three- or four-digit security code printed on your credit card
The CID (Card Identification Data) is a short number on your card that proves you physically have it when you make a purchase. It sits on the back of most cards as a three-digit code, or on the front of American Express cards as a four-digit code. Merchants ask for it during online or phone purchases because they cannot swipe your card themselves — the CID confirms you're not just using a stolen card number.
You'll also hear it called a CVV (Visa and Mastercard), CVC (Discover), or CID (American Express). The names differ slightly by card company, but they all do the same job: they're a security layer between you and fraud.
The CID is not the same as your card number or PIN. Your card number is printed on the front and identifies your account. Your PIN is a number you create to withdraw cash at an ATM. The CID is only for proving you have the physical card during remote transactions.
Key Takeaways
- A CID is a three- or four-digit code on your card that merchants request during online or phone purchases to verify you have the card in hand.
- Visa and Mastercard call it CVV, Discover calls it CVC, and American Express calls it CID — but all three serve the same security purpose.
- The CID is printed on the card itself and is not stored in the magnetic stripe or chip, which is why a stolen card number alone cannot be used online.
- You should never share your CID with anyone except the merchant you are actively paying, and legitimate companies will never ask for it by email or phone.
Where to find your CID on different card types
On Visa, Mastercard, and Discover cards, the CID is a three-digit number on the back of the card, usually printed to the right of the signature strip. Look for a small group of numbers — it will be the last three digits of a longer number printed there.
On American Express cards, the CID is a four-digit code printed on the front of the card, above the card number on the right side. Because American Express uses a different card layout than other companies, the location is different, but the purpose is identical.
If your card is damaged and you cannot read the CID, contact your card issuer (the bank or company that sent you the card). They can read it from their records and tell you the number over the phone. You do not need to request a replacement card unless the card itself is unusable.
Why merchants ask for the CID during online and phone purchases
When you swipe or insert your card in person, the merchant's machine reads the chip or magnetic stripe and confirms the card is real and active. Online and over the phone, the merchant has no way to read the card itself — they only have the number you typed or spoke aloud. A thief with a stolen card number can make an online purchase without having the physical card.
The CID stops that. Because it is printed on the card and not stored in the chip or stripe, a thief who only has your card number cannot complete an online purchase without also having the card in hand. It is a simple but effective check that you are the person making the transaction.
Merchants are required by their payment processors to request the CID for online and phone transactions. It is not optional — it is part of the security standard that protects both you and the merchant from fraud.
The difference between CID and your card number
Your card number is the 16-digit (or sometimes 15-digit) number printed on the front of your card. It identifies your specific account and is the main piece of information a merchant needs to charge you. Your card number is stored in the chip and magnetic stripe, so a card reader can pull it automatically when you swipe or insert the card.
The CID is separate. It is only printed on the card itself and is not stored anywhere in the card's electronic data. This design means that even if someone steals your card number from a data breach or a skimming device, they cannot use it to make an online purchase without also having the physical card to read the CID from.
Think of it this way: your card number is like your home address (it identifies where you are), and your CID is like showing an ID at the door (it proves you actually live there).
How to protect your CID from fraud
Never share your CID with anyone except a merchant you are actively paying. Legitimate companies — your bank, your card issuer, customer service representatives — will never ask for your CID by email, text, or unsolicited phone call. If someone contacts you asking for it, that is a red flag for fraud.
When you enter your CID online, make sure you are on a secure website. Look for the padlock icon in your browser's address bar and confirm the web address starts with "https://" (the "s" means secure). Do not enter your CID on a website that does not have these signs.
If your card is lost or stolen, contact your card issuer immediately. They will cancel the card and send you a replacement with a new CID. Until the replacement arrives, the old CID is useless because the card itself is no longer active.
What happens if someone has your CID
If someone has your CID but not your card number, they cannot make a purchase. The CID is only useful paired with your full card number, expiration date, and billing address. A CID alone is worthless.
If someone has both your card number and your CID, they can attempt online or phone purchases. However, most merchants also verify your billing address and expiration date, and many card issuers monitor for unusual activity and will block suspicious transactions. If you notice unauthorized charges, contact your card issuer right away — federal law limits your liability for fraudulent charges, and most card companies will reverse them.
The best protection is to check your card statement regularly and report anything you do not recognize. Most card issuers offer fraud alerts or text notifications when charges are made, which can help you catch problems early.
CID versus other security features on your card
Your card has several layers of security, and the CID is just one of them. Your card also has a chip (on newer cards) that encrypts your information and makes it harder to counterfeit. It has a magnetic stripe (on older cards) that stores encrypted data. It has a hologram or other visual security feature that is difficult to copy. And your card issuer monitors your account for unusual activity.
The CID works alongside these features. The chip and stripe protect you during in-person transactions. The CID protects you during remote transactions. Together, they make it much harder for a thief to use a stolen card number.
Frequently Asked Questions
Is it safe to give my CID to an online store?
Yes, if the store is legitimate and the website is secure (look for the padlock icon and "https://" in the address bar). The CID is designed to be entered during online purchases. Only enter it on websites you trust and that have proper security.
What if I accidentally shared my CID with someone?
Contact your card issuer right away. They can monitor your account for fraudulent activity. If the person also has your card number and expiration date, ask your issuer whether you should request a replacement card. If they only have the CID, the risk is lower, but it is still worth reporting.
Can I use my card online without entering a CID?
Some merchants do not require a CID, especially if they use additional security measures like address verification or 3D Secure (a technology that adds an extra verification step). However, most online retailers will ask for it. If a site does not ask, that does not mean it is unsafe — it just means they are using a different security method.
Does my CID change if I get a new card?
Yes. Each card has its own unique CID printed on it. When your card issuer sends you a replacement card (whether because yours expired, was damaged, or was compromised), the new card will have a different CID.
Why is American Express CID four digits instead of three?
American Express uses a different card format and security system than Visa and Mastercard. The four-digit code provides the same level of security as the three-digit codes on other cards — the extra digit is just part of how American Express designed their system.