Card fraud cost Americans $10.93 billion in 2023, according to the Nilson Report. A significant portion of that fraud happens online, where a stolen card number alone can be enough to make unauthorized purchases. That is exactly the problem the CVV on a debit card is designed to prevent. If you have ever been asked to enter those three digits at checkout and wondered what they actually are and why they matter, this guide has the answers.
The CVV (Card Verification Value) on a debit card is a short security code, typically three digits, that is used to confirm you have the physical card in your possession. It is required for most online purchases and phone transactions where you cannot swipe or insert your card in person.
The CVV code exists as a separate layer of protection beyond your card number. A thief who obtains your 16-digit card number through a data breach or phishing attempt still cannot complete most online transactions without the CVV. It is a small number that serves a significant security purpose.
It is worth noting that different card networks use different names for the same feature. Mastercard calls it CVV2. Visa calls it CVC (Card Verification Code). American Express uses a 4-digit version called CID located on the front of the card. Regardless of the name or network, the function is identical.
On a standard Mastercard or Visa debit card, the CVV is the 3-digit number printed on the back of the card, typically in or near the signature panel on the right side. It is separate from your full card number.
The CVV is intentionally not embossed or raised like the card number. It is printed flat, which means it cannot be captured by old-style card imprint machines. It is also not encoded on the magnetic stripe, which adds another layer of separation between it and other card data.
If you have trouble reading the number, take the card to any FSCB branch and a team member can confirm your account details.
CVV and CVV2 refer to the same concept but represent two generations of the same security feature. The original CVV (Card Verification Value) was encoded in the magnetic stripe of the card. CVV2 is the printed code on the back, the one you see and use for online transactions.
Because CVV2 is printed separately and not stored in the magnetic stripe, it cannot be captured by a card skimmer at an ATM or gas pump. Even if someone clones your magnetic stripe, they still will not have your CVV2. For FSCB debit cardholders using a Debit Mastercard, the code on the back of your card is technically the CVV2, though most people and most checkout forms simply refer to it as the CVV.
The CVV on your debit card serves as a verification checkpoint that happens outside of the physical transaction. When you shop in person, the chip or magnetic stripe proves you have the card. When you shop online, neither of those is available, so the CVV fills that gap.
Critically, merchants are prohibited by Payment Card Industry (PCI) Data Security Standards from storing CVV codes after a transaction is completed. That means even if a retailer you have shopped with suffers a data breach, your CVV should not be in their database. Thieves who steal payment card data from merchants typically obtain the card number and expiration date but not the CVV, which limits what they can do with that information.
It is one layer in a broader set of protections, not an infallible guarantee, which is why FSCB pairs it with additional security features including Mastercard Zero Liability Protection and real-time transaction alerts.
If you believe your CVV or card details have been exposed, act quickly. The sooner you report the issue, the more limited the potential damage.
You can also find additional guidance on the FSCB fraud prevention resources page.
Protecting your CVV is part of broader debit card security hygiene. These habits reduce your exposure significantly:
For more tips, see our guide on how to keep your debit card PIN secure and our broader guidance on protecting your debit card against fraud.
The CVV on your debit card is one piece of a layered security system. FSCB's Debit Mastercard builds on that with Mastercard Zero Liability Protection, which covers you against unauthorized purchases if your card is lost or stolen. Mastercard ID Theft Protection operates 24 hours a day, 365 days a year, helping to protect, detect, alert, and resolve identity theft issues before they become bigger problems.
Advanced Card Control lets you switch your card off instantly through FSCB digital banking, and real-time alerts keep you informed of every transaction as it happens. Contactless payments with encrypted one-time codes add another layer so your actual card information is never exposed at the point of sale.
Learn more about FSCB's Debit Mastercard or visit any FSCB branch in Missouri to get started today.
No. Your PIN (Personal Identification Number) is a 4-digit code you create and enter in person at ATMs and card terminals to authorize transactions. Your CVV is a pre-printed 3-digit security code on the back of your card used for online and phone purchases. They serve different purposes, and neither should be shared with anyone.
For most online and phone transactions, yes, the CVV is required and the transaction will be declined without it. However, some merchants do not require a CVV for certain purchases, and in-person transactions do not require it at all since the chip or magnetic stripe is used instead. This is why protecting your full card information, not just the CVV, remains important.
Only when entering it yourself into a trusted, secure checkout form for a purchase you are initiating. You should never read your CVV aloud to someone over the phone, send it in a text message, or type it in an email. FSCB will never ask you for your CVV. If anyone claiming to represent FSCB asks for it, that is a scam. Hang up and call us directly at 1-877-955-3722.
Contact FSCB immediately at 1-877-955-3722. We can deactivate your current card, review recent transactions for any unauthorized activity, and issue a replacement card with a new CVV. The faster you act, the more limited the potential impact. In the meantime, use FSCB digital banking to switch your card off and monitor your account for any suspicious charges.
Yes. FSCB's Debit Mastercard includes Mastercard Zero Liability Protection, which covers unauthorized purchases if your card is lost or stolen. The card also comes with Mastercard ID Theft Protection, which operates 24/7 and covers identity theft monitoring, alerts, and resolution support. Advanced Card Control lets you turn your card off instantly through digital banking, and real-time transaction alerts notify you of every charge as it happens.