The 16 digits on your card are a routing system, not your account number
The number embossed or printed on your payment card — usually 16 digits for Visa and Mastercard, 15 for American Express — is called the primary account number, or PAN. It is not your bank account number. It is a separate identifier that card networks use to route transactions, and it changes every time you get a new card, even if your underlying bank account stays the same.
The card number itself tells the payment network which bank issued it, which country it came from, and which customer it belongs to. When you swipe, insert, or tap your card, that number is the first thing the merchant's terminal reads. The network uses it to find your issuing bank, confirm the card is active, and check whether the transaction should be approved.
Understanding what this number does — and what it does not do — matters because it shapes what happens when your card is compromised, how fraud protection works, and why replacing a card does not disrupt your bank account.
Key Takeaways
- Your card number is a routing identifier managed by the card network, not your actual bank account number, and it changes with each new card you receive.
- The first digit tells the network which card brand issued it (4 for Visa, 5 for Mastercard, 3 for American Express), and the next five or six identify your issuing bank.
- When you lose or replace a card, your bank account and routing number stay the same, but the card number is deactivated and a new one is issued.
- Merchants and payment processors see your card number during a transaction, but your bank account number is never shared with them under normal circumstances.
- Card networks use the last digit as a checksum to catch typos and basic fraud, but the full number is what actually authorizes the payment.
How the card number is structured and what each part means
The card number follows a standard format called the ISO/IEC 7812 standard, which every major card network uses. The first digit is the major industry identifier, or MII. For payment cards, this is almost always 3, 4, or 5. A 4 means Visa, a 5 means Mastercard, and a 3 means American Express or Diners Club.
The next five or six digits are the issuer identification number, or IIN. This tells the payment network which bank or credit union issued the card. Chase, Bank of America, Citi, and every other card issuer has its own IIN range. When a merchant's terminal reads your card, it uses the IIN to route the transaction to the correct bank for approval.
The remaining digits (up to the last one) are your account identifier — the number that ties the card to your specific account at that bank. The very last digit is a check digit, calculated using the Luhn algorithm. This digit catches straightforward errors like transposed numbers or typos. If you mistype one digit when entering your card number online, the check digit will usually fail and the transaction will be rejected before it even reaches your bank.
Why your card number is not the same as your bank account number
Your bank account number — the one you use for wire transfers, direct deposits, and ACH payments — is a separate identifier tied directly to your deposit account at your bank. Your card number is a payment network identifier that your bank issues to let you access that account through the Visa or Mastercard network.
This separation is intentional. When you give your card number to a merchant or an online retailer, that merchant never learns your actual bank account number. They see only the card number, the expiration date, and the CVV (the three-digit security code on the back). Your bank account number stays private, known only to your bank, the Federal Reserve, and anyone you explicitly authorize — like your employer for direct deposit or a utility company for automatic bill pay.
If your card is stolen or compromised, the thief can use the card number to make purchases, but they cannot access your bank account directly. Your bank can cancel the card number and issue a new one without touching your account. Your routing number, account number, and the money in your account all remain unchanged.
What happens to your card number when you get a new card
Every time your bank sends you a replacement card — whether because yours expired, was lost, was stolen, or you straightforward requested a new one — you receive a new card number. The old number is when ready deactivated. Any recurring charges tied to the old number (subscriptions, gym memberships, insurance payments) will fail unless you update them with the new number.
Your bank account itself does not change. Your routing number stays the same. Your account number stays the same. Only the card number changes. This is why replacing a card is usually quick and painless from the bank's perspective — they are straightforward issuing a new routing identifier, not closing or reopening an account.
If you have set up autopay for a bill using your card number, you will need to update that payment method after you receive a new card. Some billers (utilities, insurance companies) will contact you to ask for the new number. Others will not, and the payment will straightforward fail. Checking your recurring charges after a card replacement is a good habit to develop.
How merchants and networks use your card number
When you hand your card to a cashier or enter the number on a website, the merchant's payment processor reads the card number and sends it to the card network (Visa, Mastercard, American Express, or Discover). The network uses the IIN to route the transaction to your issuing bank. Your bank checks whether the card is active, whether you have sufficient funds or available credit, and whether the transaction matches your typical spending patterns.
If everything checks out, your bank sends an approval code back through the network to the merchant. The merchant completes the sale. The card number itself is the key that opens this chain — without it, the network has no way to know which bank to contact or which account to charge.
Merchants are required by the Payment Card Industry Data Security Standard (PCI DSS) to protect card numbers they store. In practice, most merchants do not store the full number. They store a token — a substitute value that the payment processor creates — or they store only the last four digits for reference. The full card number is encrypted, deleted, or never stored at all. This limits the damage if a merchant's database is breached.
Card numbers and fraud protection
Your card number is the first line of defense against fraud because it is the easiest part of your card to replace. If someone uses your card number to make unauthorized purchases, you report the fraud to your bank. Your bank reverses the charges (this is called a chargeback) and issues you a new card number. The old number is dead.
This is different from your bank account number. If someone gains access to your bank account number and routing number, they can set up unauthorized ACH transfers or bill-pay payments directly from your account. Reversing those is more complicated and can take longer. This is one reason why you should never give your bank account number to a merchant — always use your card number instead.
The CVV (the three-digit code on the back of your card) adds a second layer. Merchants are not supposed to store the CVV, and the card networks do not transmit it during in-person transactions. It is used only for online and phone purchases to verify that you physically have the card. If a thief has only your card number and expiration date but not the CVV, they cannot complete most online purchases.
What card networks and issuers know about your card number
Your card issuer (your bank or credit union) knows your card number because they issued it. They use it to track your transactions, manage your credit limit, and enforce fraud rules. The card network (Visa, Mastercard, etc.) knows your card number because every transaction flows through their system. They use it to route payments and settle accounts between banks.
Neither the network nor the issuer shares your full card number with merchants unless you explicitly authorize it (for example, by saving the card in your account at an online retailer). Merchants see the number during the transaction, but they are contractually forbidden from storing it in plain text or using it for any purpose other than processing that specific payment.
Third-party payment processors (like Square, Stripe, or PayPal) may see your card number during a transaction, but they are also bound by PCI DSS rules. Most modern payment systems use tokenization, which means the processor never actually handles your full card number — they handle a token instead, and the card network translates the token back to your card for authorization.
Frequently Asked Questions
Is my card number the same as my account number?
No. Your card number is a payment network identifier issued by your bank. Your account number is the identifier for your actual deposit account. They are separate. Your bank account number is never shared with merchants under normal circumstances.
What can someone do with just my card number?
With only your card number and expiration date, a thief can attempt online purchases, but most will fail without the CVV. With the CVV as well, they can make online and phone purchases until you report the card stolen and your bank deactivates the number. They cannot access your bank account directly.
Do I need to update my bank account information when I get a new card?
No. Your bank account, routing number, and account number do not change. You only need to update your card number with merchants and billers who have recurring charges set up on your old card.
Why do I have to give my card number to online merchants if it is not find?
Card numbers are find enough for online use because they are straightforward to replace and fraud is reversible. If your card number is compromised, you get a new one and the fraudulent charges are reversed. Your actual bank account is harder to replace and harder to recover from, so it stays private.
Can a merchant see my bank account number when I use my card?
No. Merchants see only your card number, expiration date, and (for online purchases) the CVV. Your bank account number, routing number, and PIN are never transmitted to merchants during a card transaction.