A credit card number is a 13- to 19-digit code printed or embossed on your card that identifies your account to merchants and payment networks

The number itself is not random. Each digit or group of digits tells the payment system something specific: which bank issued the card, what type of card it is, and whether the number is valid. When you swipe, insert, or type your card number online, that number is what connects your purchase to your account so the bank knows to charge you.

Understanding what your card number is and how it works helps you spot fraud, know what information is actually sensitive, and understand why certain security measures exist. It also helps you know what to protect and what you can safely share.

Key Takeaways

  • A credit card number has 13 to 19 digits, and each section identifies the bank, card type, and account in a specific order.
  • The first digit or two identify the card network (Visa, Mastercard, American Express, Discover), and the next digits identify your bank and account.
  • The last digit is a check digit that helps detect typos and fraud by using a mathematical formula called the Luhn algorithm.
  • Your card number alone is not enough to make a purchase online — merchants also need the expiration date and CVV security code.
  • If your card number is compromised, contact your bank immediately; you are not liable for fraudulent charges, and the bank will issue a new card.

How the digits break down

A Visa card has 16 digits. A Mastercard has 16. American Express has 15. Discover has 16. The first digit or two always identify the card network: Visa cards start with 4, Mastercards with 5, American Express with 3, and Discover with 6.

The next several digits identify your bank — the institution that issued the card to you. Then comes a series of digits that identify your specific account within that bank's system. This is why two Visa cards from the same bank will have different numbers: the account digits are unique to each cardholder.

The very last digit is called the check digit. It is calculated using a formula called the Luhn algorithm, which runs all the other digits through a mathematical check. This digit helps payment systems catch typos when you enter your number, and it also helps detect counterfeit or fraudulent card numbers that were generated randomly rather than issued by a real bank.

What makes a card number sensitive information

Your card number is sensitive because it is the core identifier that links a purchase to your account. However, the number alone is not enough to make a purchase. Online merchants need three pieces of information: the card number, the expiration date, and the three- or four-digit security code on the back (called the CVV or CVC). In person, you may only need to swipe or insert the card, but the terminal still reads all the information from the magnetic stripe or chip.

This is why you should never share your full card number, expiration date, and CVV together with anyone you do not trust completely. A scammer with just the number and expiration date cannot charge your card online without the CVV. A scammer with the number and CVV but no expiration date will have a harder time. But all three together, and they can make purchases until you notice and report the fraud.

Your card number is also sensitive because it can be used to identify you. If someone has your card number and knows other details about you (your name, address, phone number), they may be able to call your bank and convince a representative to change your account settings or issue a new card in their name.

Where your card number appears and how it is protected

Your card number appears on the front of your physical card, embossed or printed. It also appears in your online banking portal, in your bank's mobile app, and in your email receipts. When you make a purchase, the number is transmitted to the merchant and then to the payment network and your bank.

Modern payment systems use encryption to protect your card number in transit. When you enter your card number on a secure website (one with "https://" in the address bar and a padlock icon), that information is scrambled so that only the merchant's server and your bank can read it. Merchants are also required to follow a security standard called PCI DSS (Payment Card Industry Data Security Standard), which sets rules for how they store and handle card numbers.

Despite these protections, card numbers are still stolen. Hackers break into merchant databases, skim card readers at gas pumps and ATMs, or intercept unencrypted information. This is why your bank monitors your account for unusual activity and why you should check your statements regularly.

What to do if your card number is compromised

If you believe your card number has been stolen or used fraudulently, contact your bank immediately. You can usually find the customer service number on the back of your card or in your online banking portal. Tell them which charges are fraudulent, and they will begin an investigation.

You are protected by federal law from liability for fraudulent charges on your credit card. If someone uses your card number without permission, you are not responsible for those charges as long as you report them. Your bank will remove the fraudulent charges from your account and issue you a new card with a new number, usually within 7 to 10 business days.

While you wait for the new card, you can still use your account online if your bank allows it, or you can ask the bank to issue a temporary card number for online purchases. Some banks also offer virtual card numbers — temporary numbers tied to your account that expire after one use or after a set time period.

Why card numbers are not the same as account numbers

Your credit card number and your bank account number are different things. Your bank account number is used for direct deposits, wire transfers, and checks. Your credit card number is used only for credit card purchases and payments. If someone has your credit card number, they cannot access your bank account or drain your checking or savings account.

Similarly, your credit card number is not the same as your Social Security number, driver's license number, or any other form of ID. Merchants do not need these numbers to process a credit card payment. If someone asks for your Social Security number in order to process a credit card purchase, that is a red flag for fraud or a scam.

How card numbers relate to your credit report and credit score

Your card number itself does not appear on your credit report. Your credit report shows that you have a credit card account with a particular bank, the credit limit, your payment history, and your current balance — but not the actual card number. Your credit score is calculated based on your payment history, how much credit you are using, the length of your credit history, and other factors, but not based on the card number itself.

However, fraudulent charges on your card can affect your credit if they go unpaid or if the fraud causes your account to be closed or sent to collections. This is another reason to report fraud quickly: the sooner your bank removes the fraudulent charges, the sooner your account returns to normal and your credit is protected.

Frequently Asked Questions

Is it safe to give my card number to a merchant over the phone?

It is generally safer to use a secure website or mobile app, but phone orders are common and can be safe if you initiated the call to a merchant you trust. Never give your card number to someone who called you unsolicited. If you are unsure whether a call is legitimate, hang up and call the merchant directly using the number on your statement or their official website.

What is the difference between my card number and my CVV?

Your card number is the 13- to 19-digit code on the front of your card that identifies your account. Your CVV (or CVC) is the three- or four-digit security code on the back. The CVV is not stored in the magnetic stripe or chip, so merchants cannot see it when you swipe or insert your card in person — only when you type it in online. This makes the CVV an extra layer of security for online purchases.

Can someone use my card number if they do not have the expiration date?

It is much harder, but not impossible. Online merchants require the expiration date, so a scammer with only your card number would be blocked at most websites. However, some older payment systems or international merchants may not require it, and a scammer could try to use your number at a physical store by creating a counterfeit card. This is why you should report a compromised card number even if you do not see fraudulent charges yet.

Why do some card numbers start with different digits?

The first digit identifies the card network. Visa always starts with 4, Mastercard with 5, American Express with 3, and Discover with 6. This tells the payment system which network to route the transaction through. Different networks have different fees, security features, and rewards programs, which is why banks issue cards on different networks.

What happens to my old card number when I get a new card?

Your old card number is deactivated and no longer works. Any recurring charges (like subscriptions or automatic bill payments) that were set up with the old number will fail unless you update them with the new number. Your bank usually sends you a notice with instructions on how to update your recurring payments, or you can log into each service and update the card information yourself.