I agree the input should allow 4 digits, but you should still be able to use the three digit code on the back of the AMEX instead.