Do you have a question about consumer credit? You may find an immediate answer by using the search engine. If you can't find what you're looking for, please fill out the form, being as specific as possible.
Please note: The Ask Experian team cannot respond to each question individually. However, if your question is of interest to a wide audience of consumers, the Experian team will include it in a future column.
The information contained in this column if for educational purposes only and is not legal advice. You should consult your own attorney or seek specific advice from a legal professional regarding your particular situation.
Please understand that Experian policies change over time. Column responses reflect Experian policy at the time of writing. While maintained for your information, archived responses may not reflect current Experian policy.
Topics addressed on December 10, 2008:
Sharing the security code on your credit card
I purchased something by phone recently and was asked for the security code on the back of my credit card. I thought it was strange, but she said she needed it to complete the transaction. I heard on the news that you should never give that out. Is that true?
I’m always skeptical of statements that include words like “never” or “always.” There is usually an exception, and this instance is no different.
The reason you were asked for the security code was to protect you from fraud. When you are making a transaction by telephone or over the Internet, the business has no way to know that you actually are holding the card and didn’t just steal someone’s credit card number.
By providing the security code you are verifying that you actually have the credit card, adding a layer of protection for you and the business. That is what the security code was designed to do.
However, that doesn’t mean you should always give the code when you are asked for it.
The same common sense rules apply to sharing the security code that apply to providing your Social Security number. Here is my short list of absolutes:
Provide the number only if you initiate contact with the business.
Only provide the code when you understand why the business needs it.
Only provide the security code when you are confident the business is legitimate.
Never provide the code to someone who calls you.
Never provide the code in response to an email that is sent to you unless the email is in response to a transaction you initiated and you understand why you got the email.
The same rules apply to other sensitive personal information. There are good reasons for a business to request information and for you to share it, but there are predators out there who would like to get that information, too, so you have to be careful.
Thanks for asking.
- The "Ask Experian" team