What Are Soft Declines? Soft vs Hard Declines and Smart Retries (2026)

Soft declines are card authorizations refused for a temporary reason: insufficient funds, an issuer system down, a velocity limit, or a missing authentication. They can be retried, with the right timing and data. Hard declines are refusals for a permanent reason, such as a lost, stolen, closed or invalid card. Retrying them is useless and, since 2022, billable.

The distinction decides money on both sides. Retrying a soft decline at the right moment recovers subscription revenue and checkout sales. Retrying a hard decline earns a scheme penalty, a fraud signal and, in volume, an investigation. Visa and Mastercard both tightened reattempt rules and fees between 2022 and 2026, so retry logic has become a compliance topic for PSPs, PayFacs and platforms.

What is the difference between a soft decline and a hard decline?

Every refused authorization returns an ISO 8583 response code chosen by the issuer. Acquirers and gateways map the codes; Worldpay’s scheme response code table is a readable example.

• Soft, retry later: 51 insufficient funds, 61 exceeds withdrawal amount limit, 65 exceeds withdrawal frequency limit, 91 issuer unavailable, 96 system malfunction, 05 do not honor (the generic code, often temporary, sometimes not).
• Soft, fix the data first: 54 expired card, 55 incorrect PIN, 1A additional customer authentication required (Visa), and Mastercard’s 65 in the same role: the issuer wants strong customer authentication before it approves.
• Hard, never retry: 04 pick up card, 41 lost card, 43 stolen card, 14 invalid account number, 12 invalid transaction, 57 transaction not permitted to cardholder, R0 and R1 (cardholder stopped the recurring payment), 46 closed account.

A merchant-facing “do not honor” hides the most value and the most risk: it is retryable under Visa rules, but blind repetition of it is what the penalty programs were built against.

What are the Visa and Mastercard rules on reattempts?

Visa: four categories and a 30-day window

Visa groups decline codes into four categories. Category 1, “issuer will never approve” (03, 04, 07, 12, 14, 15, 41, 43, 57, 62, 78, 93, R0, R1, R3) must not be reattempted at all since April 2022. Categories 2 (cannot approve at this time: 19, 51, 59, 61, 65, 75, 86, 91, 96, N3, N4), 3 (invalid data: 14, 54, 55, 82, N7) and 4 (all other codes) may be retried within a limit per card per 30 days. The limit was originally 15; PayPal’s current guidance states that Visa allows 20 retries in 30 days on soft declines (Cat. 2-4), and fees of $0.10 per excess domestic reattempt and $0.25 cross-border, the cross-border rate having risen from $0.15 on April 25, 2026. Every Category 1 reattempt is billed from the first one. Evolve’s summary of the Processing Integrity Fee program adds that data-quality declines should be revalidated before any reattempt.

Mastercard: Transaction Processing Excellence and Merchant Advice Codes

Mastercard counts reattempts twice: 10 in 24 hours and 35 in 30 days for soft declines, after which it charges $0.50 in the US, €0.55 in the EU and BRL 2.00 in Brazil per excess attempt. Hard declines (04, 14, 15, 41, 43, 54 in card-not-present) must not be re-submitted with the same PAN and expiry; there is no per-transaction fee, but repeated abuse triggers an investigation. On top of the response code, Mastercard issuers send a Merchant Advice Code: 01 new account information available (update the credentials first), 02 cannot approve at this time (retry after 72 hours), 03 do not try again, 21 the cardholder cancelled the recurring agreement, and 24 to 29 insufficient funds with a suggested wait of one hour to eight days. A retry within 30 days after a MAC 03 or 21 costs €0.50 in Europe. IXOPAY notes that billing arrives two months after the activity, which is why merchants discover the fees late.

The SCA soft decline

In the EEA and the UK, an issuer can refuse an authorization that arrives without strong customer authentication or with an exemption it rejects. Checkout.com describes it as a decline of non-3DS or frictionless 3DS payments presented without SCA, answered by upgrading the payment to 3-D Secure and resubmitting. In France, the central bank asked issuers to soft decline all customer-initiated exemptions not requested through EMV 3DS from March 10, 2025. The retry here is immediate and needs authentication data, not time. The exemption mechanics are in our guide to 3D Secure, SCA and delegated authentication.

How do smart retries work?

1. Classify the decline by response code, Merchant Advice Code and Visa category, per scheme and per acquirer mapping.
2. Stop on hard declines and on R0, R1 and MAC 21: the cardholder or the issuer has ended the relationship. Ask for a new payment method.
3. Fix data before retrying on 54, 14 and MAC 01: query the account updater, or swap the PAN for a network token that the issuer updates itself.
4. Authenticate before retrying on 1A and SCA refusals: resubmit with a 3-D Secure challenge, immediately.
5. Schedule the rest: insufficient funds retries around paydays and MAC windows, issuer-down retries after minutes, within the 20-per-30-days and 10-per-24-hours caps per card across all merchants and brands of the operator.
6. Change the path, not only the time: a 91 or 96 from one acquirer is a reason to route the next attempt elsewhere, which is payment fallback.
7. Record every attempt with its code, so the retry counter, the finance team and the scheme reporting agree.

Soft declines in numbers (2026)

• Visa limit: 20 reattempts per card per 30 days on soft declines, none on hard declines.
• Mastercard limit: 10 per 24 hours and 35 per 30 days, then $0.50 or €0.55 per attempt.
• Visa fee: $0.10 domestic and $0.25 cross-border per excess reattempt, before any acquirer markup.
• False declines: Datos Insights puts the average false decline rate at 1.51% of e-commerce sales, nearly $175 billion lost in 2024, rising to $265 billion by 2027.
• Merchant view: 47% of merchants say false declines cost them sales, and nearly half estimate up to 5% of legitimate orders are declined.
• Approval rates: 57% of US and UK merchants report authorization approval rates in the 90% range, up from 33% in the US in 2022.

Soft declines: what changes for PSPs, PayFacs and platforms

Retry counters are per card, across the portfolio

Scheme limits apply to the card, not to the merchant. An operator that runs hundreds of sub-merchants and several brands needs one counter per PAN or token across all of them, or one merchant’s dunning schedule can push another into fees. The cap belongs in the platform, next to velocity limits.

Subscriptions: retries that keep the billing date

Recurring billing is where soft declines concentrate. A retry policy should follow the MAC wait windows, use the Visa Account Updater and its Mastercard equivalent to refresh expired or reissued cards before the next cycle, and prefer network tokens, which issuers update without a query. The recurring payment infrastructure must also stop on MAC 21 and R1, because a cancelled mandate retried is a chargeback in waiting. We describe the operator model in white-label subscription billing.

Routing: the retry can change acquirer

Issuer-unavailable and system codes, and some “do not honor” responses, approve on a second acquirer or a local one. Routing rules keyed on the decline code, with fallback when a provider times out, turn part of the soft declines into approvals without waiting. The connectors available per country set the options. We explained the trade-offs in the challenge of payment routing and the recovery logic in payment fallback routing for PSPs and PayFacs.

Pricing and reporting

Excessive reattempt fees arrive on the acquirer’s scheme fee invoice two months later, by fee code. Operators need to allocate them to the merchant that caused them, decide whether to pass them through, and show decline reasons per merchant, acquirer and BIN so support and risk read the same picture. The BIN angle is covered in BINs as decision drivers, and payment orchestration is where the counter, the routing and the reporting meet.

Are smart retries worth it in 2026?

Yes, within the rules. A soft decline is a second chance that costs nothing if taken at the right time with the right data, and a fee, a fraud flag or an investigation if taken blindly. The 2026 rulebook is explicit: never on Category 1 and Mastercard hard declines, 20 per 30 days on Visa, 10 per day and 35 per month on Mastercard, update credentials before retrying, authenticate when asked. For PSPs, PayFacs and platforms the task is to run one retry engine, one counter per card and one decline report across every merchant and brand. The stored credential mandate report in our library is the companion reading for recurring flows.