The CSC for American Express is a four-digit code on the front of the card above the account number.
CSC was originally developed in the UK as an eleven-character alphanumeric code by Equifax employee Michael Stone in 1995.
After testing with the Littlewoods Home Shopping group and NatWest bank, the concept was adopted by the UK Association for Payment Clearing Services (APACS) and streamlined to the three-digit code known today.
The card security code is not encoded on the magnetic stripe but is printed flat.
Virtual terminals and payment gateways do not store the CVV2 code; therefore, employees and customer service representatives with access to these web-based payment interfaces, who otherwise have access to complete card numbers, expiration dates, and other information, still lack the CVV2 code.
Supplying the CSC code in a transaction is intended to verify that the customer has the card in their possession.