Your debit card security code offers another line of defence against unauthorised access to your banking account.
Your debit card provides a direct link to your banking account, which means your savings could be completely wiped out if it ends up in the wrong hands. To minimise that risk, especially with online or over-the-phone purchases, most debit cards come equipped with a special security code that ensures the person providing the debit card details in a transaction has it in their possession.
What is a debit card security code?
Most banks now provide account holders with a debit card that contains a special three-digit or four-digit numeric code embedded on it, similar to the codes on a credit card. This numeric code is separate to the debit card number and verifies the cardholder. This is especially important for when you are making online or over-the-phone purchases, where you cannot provide a signature as proof of your authorisation to use the card.
Amanda is shopping for a pair of sneakers for her son and finds the pair of Nikes he wants on sale at an online sporting goods store. Since there are no retailers close to her house and the retailer is able to deliver within seven days, she decides to make the purchase online using her debit card.
She proceeds to checkout where she is prompted to enter her personal information followed by her debit card number and expiration date. The last field asks for the security code, which she finds on the back of her card in small print. Once entered, the transaction is processed and the new pair of tennis shoes is on their way to Amanda’s house.
Where is the code located?
The debit card security code can be found on the back of the card in the bottom-right corner of the signature panel. Instead of being embossed like your card number, it’s printed in small black letters. This security code is typically three or four numbers long and completely different from the series of numbers embossed on the front.Back to top
What are the security benefits?
It is a requirement by the issuer of debit cards with security codes and the Payment Card Industry Data Security Standard that the code not be stored in any database once the transaction has been authorised. This measure ensures that the card numbers will not be useful if the merchant’s payment records are hacked. The security code is not included in the information that can be found on the magnetic strip, therefore making it virtually impossible for an individual who has obtained the card number and expiration date to use that information to conduct a transaction online or over the phone.
Are there any limitations?
Although merchants are not permitted to store the debit card security code, they are not required to ask for it when making a transaction. This could allow for fraudulent activity from individuals who have obtained only the information found on the front of the debit card. Phishing scams, where you are tricked into giving out your debit card information on a false website, steal that information and then could use it with those merchants who do not ask for the security code at checkout.
The other drawback with the debit card security code is that it limits you when setting up periodic payments as that code is not stored along with your card number. However, since you’re setting up payments to be directly drawn from your linked bank account, you should be able to provide the account number rather than the debit card information so that direct debits can be made on an ongoing basis.
Compare debit cards below
Frequently asked questions
In the event that I have to provide a hard copy of my debit card because the stores lights are out or the swipe machine is not working, will that also copy the security code?
No. Since the security code is not embossed on the card the way the account number is, that information is not seen when a merchant makes a physical copy of your debit card.
Why is the security code blocked from view when I enter it?
Along with most of your debit card account details, that information is encrypted so that only the issuer is able to see the code when authorising the transaction.
Does a store record that code when I make a point-of-sale purchase?
No. Your signature is all that is needed for EFTPOS transactions. If you see a store clerk recording the security code, you should report it to your bank.