CID is a three- or four-digit security code printed on your card, separate from your card number

The CID (Card Identification Data) is the small set of numbers on the back of your credit card, usually in or near the signature strip. Visa and Mastercard call it the CVV (Card Verification Value). American Express prints it on the front, above your card number, and calls it the CID or CVC (Card Verification Code). It's three digits for most cards, four for American Express.

This code exists to verify that you physically have the card in your hand when you're making a purchase. When you enter it during an online checkout or over the phone, the merchant sends it to your card issuer, who checks that the number matches their records. If it doesn't match, the transaction gets declined.

The CID is not the same as your card number, expiration date, or cardholder name. It's a separate security layer that protects you from fraud when someone has your card number but not the physical card itself.

Key Takeaways

  • Your CID is a three- or four-digit code on the back (or front, for American Express) of your credit card that proves you have the card in hand.
  • Merchants ask for your CID during online purchases and phone orders to verify the card is real and belongs to you.
  • Never share your CID in an email, text, or with anyone who calls you claiming to be from your bank.
  • Your card issuer never needs to ask you for your CID because they already have it on file.
  • A lost or stolen card should be reported immediately so your issuer can block it and issue a new one with a different CID.

Where to find your CID on different card types

On Visa and Mastercard, the CID appears on the back of the card in the signature strip area, usually to the right of the signature line. It's the last three digits printed there. On American Express cards, it's on the front, above and to the right of your card number, and it's four digits long.

Debit cards follow the same pattern as their credit card counterparts. If your debit card is branded Visa or Mastercard, the code is on the back. If it's an American Express debit card, it's on the front.

Some cards printed before 2015 may have the code in a slightly different location, but it will always be separate from your main card number and expiration date. If you can't locate it, your card issuer can tell you where to look or provide the number over the phone after verifying your identity.

When you'll need to provide your CID

You'll enter your CID whenever you make a purchase online without physically swiping or inserting your card. This includes shopping on websites, paying bills through a company's website, or making a purchase through a mobile app. The checkout page will have a field labeled "CVV," "CVC," "Card Security Code," or "CID."

Phone orders also require your CID. When you call a merchant or service provider to pay by credit card, they'll ask for it before processing the charge. This protects both you and the merchant by confirming you have the card.

You will not need your CID for in-person purchases where you swipe, insert, or tap your card at a physical store. The card reader communicates directly with your bank and doesn't require the code.

Why your CID protects you from fraud

The CID is a fraud prevention tool because it's not printed on receipts and it's not stored in the magnetic stripe or chip on your card. If a criminal steals your card number from a data breach or a receipt, they can't use it for online or phone purchases without the CID. They would need the physical card itself.

This is why merchants ask for it. They're checking that the person making the purchase actually has the card. If someone has only your card number and expiration date, the transaction will fail when they can't provide the correct CID.

Your card issuer uses the CID to verify that the card is genuine. Counterfeit cards often have incorrect or missing security codes, so the issuer's system can catch them during verification.

What to do if someone asks for your CID over email or phone

Never provide your CID to anyone who contacts you by email, text, or unsolicited phone call, even if they claim to be from your bank or credit card company. Your card issuer already has your CID on file and will never ask you for it.

If you receive an email or text asking for your CID, it's a phishing attempt. Do not click any links or reply. Instead, delete the message and contact your card issuer directly using the phone number on the back of your card or on your statement.

If you called a merchant or service provider and they're asking for your CID, that's normal and safe. But if you're unsure whether you initiated the call, hang up and call the company back using a number you know is legitimate, such as one from their official website or your bill.

What happens when you get a new card

Every time your card issuer sends you a replacement card—whether because yours expired, was lost, was stolen, or was compromised—the new card will have a different CID. This is by design. The old code becomes useless the moment the new card is issued.

If your card was compromised and you reported it, the issuer will block the old card and send a new one with a new CID. Any merchant or service that had your old CID on file will need to be updated with the new one. This is another reason merchants don't store your CID: it changes too frequently to be useful for repeat transactions.

When your card expires and you receive a replacement, the new card will also have a different CID, even though your card number might stay the same. Update any stored payment information with the new code before your old card stops working.

CID versus other card security features

Your CID is one of several security features on your card, but it's not the only one. The magnetic stripe and chip on your card contain encrypted data that your bank reads when you swipe or insert the card in person. The chip is more secure than the magnetic stripe because it's harder to counterfeit.

Your card number itself is a 16-digit identifier (15 for American Express) that tells the bank which account to charge. Your expiration date tells the bank when the card stops being valid. Your name tells the merchant who the cardholder is. None of these alone prove you have the card; the CID does.

Some cards now include additional security features like tokenization, which replaces your card number with a unique code for each transaction, or biometric verification, which requires your fingerprint or face scan. These work alongside your CID, not instead of it.

Frequently Asked Questions

Is my CID the same as my PIN?

No. Your PIN (Personal Identification Number) is a four-digit code you create and use at ATMs and in-person debit card transactions. Your CID is a three- or four-digit code printed on your card that you use for online and phone purchases. They're separate security tools for different situations.

Can someone use my card number without the CID?

Not for online or phone purchases. They would need your CID to complete those transactions. However, if someone has your card number and expiration date, they could potentially use it in person at a store that doesn't check the CID or at an older payment terminal. This is why reporting a lost or stolen card immediately is important.

Should I write my CID on my card or save it somewhere?

No. Never write your CID on your card or store it in an email, text, or note on your phone. The whole point of the CID is that it's separate from your card number and not easily accessible. Keep it only in your memory or look at the physical card when you need it for an online or phone purchase.

What if I enter the wrong CID during checkout?

The transaction will be declined. The merchant's system will reject it because the code doesn't match your card issuer's records. You can try again with the correct code. Multiple failed attempts might temporarily lock your card for security reasons, but you can contact your issuer to unlock it.

Do I need to update my CID with merchants I pay regularly?

Only if your card was replaced and you have a new CID. If you set up automatic payments or saved your card information with a company, you'll need to update it with the new code when you receive a new card. Most companies have a way to update your payment method in your account settings.