Why Does 3D-Secure Matter?
3D Secure (3DS) provides an additional layer of security for online...
As magical as the payment process can seem when everything is going according to plan - your buyer simply types in their details, money is transferred, and you’re in business - the fun can come to an abrupt end when the transaction is declined. Given how many participants take part in the payment processing journey, it should come as no surprise to discover that anyone, from the gateway to the processor to the issuing bank may choose to stop a transaction in its tracks. Each of them has a responsibility to ensure they don’t enable fraudulent transactions, and they will take different approaches to fulfilling their obligations: gateways, for instance, may decline a transaction because there is no match between the card and the holder’s mailing address, while issuing banks may decline because there are insufficient funds available.
Simply stated, when a credit card is hard declined, you know the transaction cannot proceed; when it is soft declined there’s a good chance that, with some adjustment, it can.
A hard decline comes straight from the issuing, or customer, bank, and it tells you that there is a good reason why this one isn’t working, whether it be because the card has been reported stolen, the card has expired, the account has been closed, or some other rock solid reason.
By contrast, a soft decline may be based on something more ephemeral - maybe it’s a debit card that the bank would honor except the account is currently low on funds; or the issuing bank gives the thumbs up but the gateway is concerned that the address doesn’t seem to match the account details.
Decline codes combine both a number and a descriptive string (while the former is common for all merchants, the latter may be shorter and less clear for lower-volume merchants). Generally speaking, the descriptions are pretty definitive in identifying hard and soft declines.
Of course, there are many more codes from the networks, and, indeed, most payment service providers (PSPs) have their own list. Fundamentally, though, the lists are finite, and identifying the soft and hard declines is relatively easy.
The first thing to remember is that soft declines are sending a clear message: with the application of some patience or a different approach, these are close-able deals. When the issuing bank sends back an insufficient balance
or partial approval
decline, for instance, there is every reason to believe that re-presenting the transaction at a later date could result in a positive outcome.
Additionally, planning ahead can prevent some soft declines. For instance, finding that previously-valid credit card details are now coming up invalid could very well mean that the subscriber has a new card. A wide range of automatic card updater services, such as the Visa Account Updater (VAU), allow merchants to be informed as covered cardholder data gets updated, protecting the merchant’s ability to continue subscription payments, and to process for future purchases. Solutions like KnotAPI allow card issuers to automatically switch saved payment methods on behalf of their users.
What both these examples are pointing to is the need for automation in any merchant’s payment process. A well-designed decisioning engine can be used both to ensure that stored information is kept fully up-to-date, and to choose good options in response to soft declines, including to wait and try again or to automatically contact customers to request an information update.
Hard declines need to be avoided before they occur - in other words, applying security protocols and process guards within the payment system to catch low-potential transactions before they are delivered to the card networks. Adding, for instance, compliance monitoring capabilities can help to identify problematic accounts up front; and adding limits to, say, the size of transactions an individual account can make, or the number they can make in a short time window, constrains bad actors before their schemes turn into automatic declines.
3D Secure (3DS) provides an additional layer of security for online...
Vendor lock-in describes a situation where a customer becomes entirely...
Frictionless payments offer the least amount of effort to get a transaction closed. There is no...