Authorization Response Code Reference
Every authorisation returns a code, and the code tells you whether to retry, ask for more information, or stop. This reference separates approvals from the two very different kinds of decline.
| Code | Meaning | Category | Action |
|---|---|---|---|
| 00 | Approved | Approval | Complete the transaction |
| 01 | Refer to issuer | Soft decline | Retry with more detail or contact the issuer |
| 02 | Refer to issuer - card lost | Soft decline | Ask the cardholder to confirm |
| 03 | Invalid merchant | Soft decline | Fix the merchant configuration |
| 04 | Pick up card | Soft decline | Decline and ask for another card |
| 05 | Do not honour | Soft decline | Retry once, then decline |
| 06 | Error | Soft decline | Retry, log and monitor |
| 07 | Pick up card - special conditions | Soft decline | Ask the cardholder to present ID |
| 08 | Do not honour, improper amount | Soft decline | Correct the amount and retry |
| 09 | Do not honour, no such issuer | Hard decline | Do not retry |
| 10 | Not supported | Hard decline | Do not retry |
| 11 | Issuer is not possible | Hard decline | Do not retry |
| 12 | Invalid transaction | Hard decline | Fix the request format |
| 13 | Invalid amount | Hard decline | Fix the amount |
| 14 | Invalid card number | Hard decline | Do not retry |
| 15 | No such issuer | Hard decline | Do not retry |
| 17 | Transaction not permitted | Hard decline | Check the merchant category |
| 19 | Re-enter transaction | Soft decline | Retry |
| 21 | No action taken | Soft decline | Retry once |
| 25 | Unable to locate record | Soft decline | Retry |
| 28 | File temporarily unavailable | Soft decline | Retry later |
| 34 | Suspected fraud, pick up card | Soft decline | Do not retry online |
| 36 | Reversal already processed | Hard decline | Do not retry |
| 37 | No credit account | Hard decline | Do not retry |
| 38 | No account | Hard decline | Do not retry |
| 39 | No credit account | Hard decline | Do not retry |
| 41 | Lost card | Hard decline | Do not retry |
| 43 | Stolen card | Hard decline | Do not retry |
| 51 | Not sufficient funds | Soft decline | Do not retry |
| 54 | Expired card | Hard decline | Do not retry |
| 55 | Incorrect PIN | Soft decline | Ask for the correct PIN |
| 57 | Transaction not permitted | Hard decline | Check the merchant category |
| 58 | Transaction not permitted to cardholder | Hard decline | Do not retry |
| 61 | Exceeds withdrawal limit | Soft decline | Lower the amount |
| 62 | Restricted card | Hard decline | Do not retry |
| 63 | Security violation | Hard decline | Do not retry |
| 65 | Soft decline, exceeds withdrawal limit | Soft decline | Lower the amount |
| 75 | PIN tries exceeded | Hard decline | Do not retry |
| 91 | Issuer or switch is inoperative | Soft decline | Retry later |
Approval codes are separate from response codes. The response code says what happened at the issuer; the approval code is the issuer reference returned on an approval.
How this tool works
Response codes come in three families. Approvals mean the issuer authorised the transaction. Soft declines are temporary or fixable - insufficient funds, a wrong PIN, a pick-up condition - and a well-built integration retries or asks for more detail. Hard declines are terminal: a stolen card, an invalid number or a closed account, and retrying wastes attempts against the cardholder's allowance. The code list is an ISO 8583 baseline; network-specific codes extend it.
When to use it
- Decide whether a decline is worth retrying
- Map issuer response codes into your retry logic
- Explain declines correctly to support staff
- Build a decline reason dashboard
Frequently asked questions
What is the difference between soft and hard declines?
Soft declines may succeed on retry or with better input. Hard declines will not, and retrying them can exhaust the cardholder's attempt allowance.
What does code 51 mean?
Not sufficient funds. It is a soft decline because the balance can change.
Is the response code list identical on every network?
No. It is an ISO 8583 baseline that each network extends with its own codes.
Should I retry a soft decline automatically?
Usually yes, with a cap. Retry a soft decline once or twice, never a hard decline.