Hard decline is an issuer's refusal of a card payment for a reason that will not change on retry, such as a closed account, a card reported lost or stolen, an expired card or an invalid number. Issuers signal it through response codes, historically the ISO 8583 set: 14 for an invalid number, 41 and 43 for lost or stolen, 54 for expiry. Only a different card or updated details fixes it. Separating hard from soft declines drives retry strategy, since Visa forbids reattempts on Category 1 codes and caps other retries at 15 within 30 days, and Mastercard charges for excessive retries. Account updaters, network tokens and dunning messages recover part of the lost revenue.
What is a hard decline
When an issuer rejects an authorization, it returns a response code, historically the two-digit ISO 8583 codes that most processors still map to. A hard decline code tells the merchant that this card, in its current state, will not be approved. The only fix is a different card or updated card details from the customer.
What causes a hard payment decline
Common hard decline codes and their causes:
- 14, invalid card number: the PAN fails validation or does not exist at the issuer.
- 41 and 43, lost or stolen card: the cardholder has reported it and the card is blocked.
- 54, expired card, when the expiry date is past.
- 57 and 62, transaction not permitted or restricted card: the card cannot be used for this merchant category, country or channel.
- 04 and 07, pick up card: the issuer suspects fraud and wants the card retained.
Code 05, "do not honour", is a generic refusal that many processors treat as soft for a few retries.
Hard decline vs soft decline
A soft decline is temporary: insufficient funds (51), exceeded withdrawal limit (61), issuer unavailable (91) or a request for strong customer authentication (1A in the EEA). Retrying later, with a smaller amount or after 3DS, can succeed. A hard decline gets the same answer on every retry.
For a subscription business with 50,000 monthly renewals and a 6% decline rate, 3,000 renewals fail each month. If a third of those are hard declines, retry logic should skip those 1,000 and ask the customer for a new card, while retrying the other 2,000 on a schedule.
Card network retry rules
Visa sorts decline codes into categories. Category 1 codes mean the issuer will never approve, and the merchant must not reattempt the same card. For the retriable categories, Visa limits reattempts to 15 within 30 days per card, with fees for excess retries. Mastercard sends Merchant Advice Codes alongside the response; MAC 03 and 21 tell the merchant not to try again, and Mastercard charges for excessive retries on refused cards.
Recovering revenue after a hard decline
Visa and Mastercard account updater services supply new card numbers and expiry dates after reissuance, and network tokens update automatically. For the rest, decline recovery relies on dunning emails and in-app prompts to collect a new payment method.
Why buyers look at decline data
In due diligence on a PSP, buyers compare hard decline rates by merchant and BIN range. A high share of stolen-card or invalid-number codes often signals card testing and scheme monitoring risk.