Get Your Free American Express CVV Information Guide

Understanding American Express CVV Codes and Card Security

A CVV (Card Verification Value) is a three or four-digit security code printed on American Express cards. The term CVV is specific to American Express, though other card companies use similar codes with different names—Visa and Mastercard call theirs CVV2 or CVC2, while Discover cards use CID. The CVV serves as an additional layer of fraud protection when you make purchases online or over the phone, locations where merchants cannot physically see your card.

On American Express cards, the CVV appears on the front of the card in the upper right corner, printed in small numbers above the account number. This placement differs from Visa and Mastercard, where the code appears on the back. The CVV code is not encoded in the card's magnetic stripe or chip—it only appears printed on the physical card itself and in your card statements. This design means merchants cannot store the CVV after a transaction, which reduces the risk that a data breach could expose this code.

The four-digit CVV on American Express cards is generated using a proprietary algorithm that incorporates information from your card. Each time you use your card legitimately, the merchant verifies that the CVV you provide matches what the card issuer has on file. When someone attempts fraudulent transactions without possessing your physical card, they typically cannot provide the correct CVV, which blocks many unauthorized purchases.

According to the Federal Reserve, card fraud affecting consumers increased significantly in the early 2020s, with counterfeit card fraud representing one of the largest categories of reported fraud. Understanding how the CVV protects you is the first step in recognizing why card security matters. The CVV is one reason why American Express maintained a 0.066% fraud rate in 2022—among the lowest in the industry—compared to debit cards which experienced higher fraud rates.

Practical takeaway: Know where to find your CVV on your American Express card (front, upper right) and understand that this code protects you by preventing unauthorized use without physical possession of your card. Never share your CVV with anyone, and be cautious when providing it even to legitimate merchants.

Where American Express CVV Information Appears and How to Locate It

Your American Express CVV appears in multiple places depending on what form your card information takes. On physical cards, look at the front of the card in the upper right area, above your account number. The four-digit code will be printed in a smaller font than your main card number. Some older American Express cards may have slightly different formatting, but the CVV remains in approximately this location on all American Express branded cards.

If you access your American Express account online through their website or mobile app, your CVV will not be displayed in your account dashboard for security reasons. American Express deliberately does not store or show your full CVV in your online account to reduce exposure if your account is compromised. You can only retrieve your CVV by looking at your physical card or checking your monthly statement, where the last four digits of your CVV may appear in certain contexts.

Your American Express monthly statement may reference your CVV in transaction records, though the full code is typically masked. If you receive a replacement card due to damage, expiration, or loss, your new card will have a different CVV. This is important to note if you have recurring payments set up with a merchant. When your card expires or is replaced, you must update merchants with your new CVV to prevent payment interruptions.

If you cannot locate your CVV on your card—perhaps due to fading print or damage—you can contact American Express customer service. They can provide you with your CVV over the phone after verifying your identity through security questions and account information. However, American Express will never send your CVV through email or text message, as these methods are not secure. Any communication claiming to be from American Express requesting your CVV through email or text is fraudulent.

Practical takeaway: Remember that your American Express CVV is only on your physical card and in direct communication with American Express—never in your online account portal, and never through email or text. If you need your CVV and cannot see it on your card, call American Express directly using the number on your statement.

How CVV Codes Protect Your American Express Account from Fraud

The CVV code protects you by creating a verification checkpoint that distinguishes between someone who physically possesses your card and someone who only has your card number. When you make a purchase in person at a store with a chip reader, the terminal reads your card's chip, which is encrypted. When you make an online purchase or provide your card number over the phone, however, merchants cannot read your chip. In these situations, the CVV serves as proof that you have your physical card in hand.

If a criminal obtains your card number through a data breach or phishing scheme, they still cannot use that number alone to make online purchases or phone purchases. When they attempt a transaction, the merchant's system will request the CVV. Without the physical card, the criminal cannot provide the correct code. The payment processor verifies the CVV against American Express's records, and the transaction is declined. This simple verification prevents the majority of card-not-present fraud attempts.

American Express reports that transactions verified with a CVV have significantly lower fraud rates than those without verification. In cases where a customer disputes a charge as unauthorized, American Express investigates whether the CVV was correctly provided. If a fraudulent transaction includes the correct CVV, it suggests either that the card was physically compromised or that the cardholder's information was obtained from a merchant's system. This information helps American Express determine liability in fraud cases and identify which merchants may have security issues.

The CVV system also protects merchants by creating documentation that the cardholder provided the correct security code at the time of purchase. This protects the merchant from certain types of chargebacks. If a customer later disputes a transaction and claims they did not make it, but the merchant has a record showing the correct CVV was provided, American Express is more likely to side with the merchant. This mutual protection incentivizes both consumers and merchants to use the CVV verification system properly.

Practical takeaway: Your CVV is your main defense against someone using your card number without your permission for online and phone purchases. Protect it as carefully as you protect your PIN—never provide it to unknown callers or unfamiliar websites, even if they claim to be from your bank.

Recognizing Scams and Fraudulent Requests for Your CVV

One of the most common scams targeting American Express cardholders involves fraudulent requests for CVV information. Scammers may pose as American Express customer service, your bank, a retail store, or a payment processor, calling or emailing you to request your CVV. They may claim there is unusual activity on your account, that your card needs verification, or that you need to update your payment information. None of these scenarios require American Express to ask for your full CVV through email, text message, or an unexpected phone call.

Legitimate companies follow a strict rule: they never ask for your full CVV through unsecured channels. American Express will never email you asking for your CVV. Legitimate customer service representatives, when you call them using the number on the back of your card, may ask for your CVV to verify your identity, but they would do this during an inbound call you initiated. If you receive an unsolicited email or call asking for your CVV, it is fraudulent regardless of how official it appears. Scammers use realistic-looking emails with American Express logos and language that mimics legitimate communications.

Phishing emails are designed to trick you into visiting a fake website that looks identical to the real American Express site. These fake sites have URLs that are slightly misspelled—for example, "americanexpress-security.com" instead of "americanexpress.com." Once on these sites, you may be directed to enter your card number, expiration date, and CVV. Criminals then use this information to make unauthorized purchases or sell it to other criminals on the dark web.

Text message scams, called "smishing," are becoming increasingly common. A message may appear to come from American Express with a link to "verify your account" or "confirm a suspicious transaction." Clicking the link takes you to a fake website designed to capture your information. Be aware that shortened URLs (bit.ly, tinyurl, etc.) hide the actual destination, making phishing links easier to disguise. Before entering any information on a website, manually type the official American Express URL into your browser rather than clicking links from emails or texts.

Practical