Card declined reasons: what the codes mean and what to do

The most common card declined reasons are insufficient funds, an expired or incorrect card number, the bank's fraud checks, a failed or abandoned 3D Secure approval, and cards that aren't enabled for online or international purchases. Some declines are temporary and worth retrying later ("soft" declines); others, such as a lost or stolen card, should never be retried ("hard" declines).

Knowing which is which lets you respond correctly: retry at the right moment, ask the customer for another method, or stop.

Who actually declines the card?

Several parties touch a card payment, and any of them can stop it:

1. Your gateway may block it with its own fraud rules or because of a technical error.
2. The customer's bank (the issuer) makes the main approve-or-decline decision, based on funds, limits, card status and fraud models.
3. 3D Secure requires the customer to approve the payment in their banking app or with an OTP. If they don't, the payment fails.
4. The card network can reject malformed or unsupported transactions.

Most declines come from the issuer, and the issuer often gives only a generic reason. That's deliberate: banks don't share detailed fraud reasoning with merchants.

Common decline codes and what they mean

Many gateways pass through the standard two-digit response codes used across the card industry, though some translate them into their own messages. Exact wording varies by provider.

If your gateway shows a code you don't recognise, its documentation should explain it.

South African specifics worth knowing

Online or international purchases switched off

Many South African banking apps let customers turn card features on and off, such as online purchases, international transactions or specific virtual cards. A card that works perfectly in a shop can be declined online simply because a toggle is off. This is one of the most common reasons behind "but there's money in my account".

3D Secure not completed

Online card payments in South Africa normally go through 3D Secure. The customer might not have noticed the banking app notification, the OTP went to an old phone number, or they closed the window too early. From your side it just looks like a failure. A short message such as "Check your banking app to approve the payment" before the redirect helps.

Payday timing

Insufficient funds declines tend to cluster in the days before month-end pay dates. If you bill subscriptions, the timing of your charge date and retries makes a real difference.

Virtual and prepaid cards

Virtual cards are increasingly common, and some have their own limits or expire when the customer regenerates them. Prepaid cards may not support recurring charges.

Soft vs hard declines: when to retry

Retry soft declines (insufficient funds, temporary issuer outages, limit exceeded) on a sensible schedule. For subscriptions, a common pattern is to retry a few times over one to two weeks, for example two days later, again around the next likely payday, and a final attempt before the account moves to past due.

Never retry hard declines (lost, stolen, invalid card, closed account). They won't succeed, and repeated attempts look like card testing to banks.

Mind the limits. Card schemes set rules on how often a declined transaction may be reattempted, and excessive retries can attract fees from your acquirer. Ask your gateway what applies to you.

Don't simply route a decline to another gateway. An issuer that declined for insufficient funds will usually decline again, whichever gateway sends the request. Switching gateways helps with provider outages, not issuer declines; see our note in multiple payment gateways.

A structured retry process for subscriptions is called dunning; our guide to dunning management covers how to design one.

What to tell customers

The customer usually doesn't know why the payment failed, and a vague error sends them away. Good decline messages:

• Stay neutral: "Your bank didn't approve this payment" rather than "Your card was rejected".
• Suggest a next step: check the card details, approve in the banking app, try another card, or pay by instant EFT.
• Keep their cart and form details so they don't start again.
• Avoid revealing fraud detail you don't have.

For a failed subscription renewal, an email might read:

Hi Sipho, we couldn't collect R249.00 for your June subscription. Your bank didn't approve the payment. You can update your card or pay now using this secure link: [link]. We'll try again on 3 June.

Reducing declines before they happen

1. Validate card details in the form (card number checksum, expiry in the future) before submitting.
2. Use a recognisable billing descriptor, so customers and their banks recognise the charge.
3. Keep saved cards current. Where your gateway supports it, network tokens or account updater services can refresh expired cards automatically.
4. Charge at sensible times for recurring payments, close to when customers are paid.
5. Offer alternatives, such as instant EFT or debit orders, for customers whose cards frequently fail.
6. Watch your decline rate by code. A sudden jump in one code usually has a single cause, such as a gateway setting or a card range.

How CentraPoint helps

When a subscription renewal is declined, CentraPoint's dunning retries try again on your schedule, move the subscription to past due if payment still fails, and customers can pay outstanding invoices by link or through the self-service portal. Emails use templates you can edit, and you can offer debit orders or invoice billing as alternatives for customers whose cards regularly fail. The subscriptions docs explain the retry settings.

Frequently asked questions

Why is a card declined when the customer has money in their account?

Common reasons are online or international purchases being switched off in their banking app, a daily or transaction limit, an incomplete 3D Secure approval, or the bank's fraud checks. The customer's bank can confirm the exact reason.

What does "do not honour" mean?

It's a generic decline from the customer's bank without a specific reason. The customer should contact their bank or use another payment method.

Should I retry a declined card?

Retry soft declines such as insufficient funds or temporary errors on a limited schedule. Never retry hard declines such as lost, stolen or invalid cards.

Can I find out the exact reason a card was declined?

Usually only the code the bank returns, which is often generic. Banks don't share detailed fraud reasons with merchants, so the customer may need to ask their bank directly.