Payments · Guide9 min readUpdated November 3, 2026

Shopify Payments Declined Payments: Codes and Fixes

Why Shopify Payments declines a card: decline codes grouped by what to do next, declines your own settings cause, card testing and retry limits.

Nick Bonnassies, CMO at Tagada · checked against 11 sources

Article summary

TL;DR

Most Shopify Payments declines come from the customer's bank, and Shopify says most are generic. Some come from your own settings, such as AVS or CVV declines and custom risk rules, and some from card testing. Read the code in the order's transaction details, then fix the data, authenticate, offer another card, or stop.

"Most declines are generic, so we don't have much information as to why a charge was declined".
Shopify's API lists 47 transaction error codes; 20 were added in version 2026-04, including `DO_NOT_HONOR`, `CARD_TESTING` and `MERCHANT_RULE`.
AVS is "deactivated by default"; if you turn on AVS or CVV declines, a failed check means "no order is placed".
A failed attempt can show as a pending charge, "typically 3-5 days" before it reverses.
Visa allows up to 20 attempts in 30 days for retryable declines, and none after a category 1 decline such as lost or stolen.

Want to go further? Ask

On this page

This page covers Shopify Payments' codes and settings only. For Visa's two-digit codes and retry categories at any processor, see declined payments: decline codes and retry rules. More Shopify guides are in the Shopify hub.

First, find out who said no

Not every decline is the bank's. Three places can refuse a Shopify Payments checkout.

Fig. 1Three places a Shopify Payments charge can fail

approved declined or closed routing step

Your settingsAVS and CVV declines, custom risk rules
checked byShopify PaymentsRoutes to the processor most likely to authorize
sent toCard issuerApproves or declines, often without a reasonDeclined

check your own settings before blaming the bank

Based on Shopify Help Center (Declined payments, Configuring Shopify Payments) and the OrderTransactionErrorCode enum, read November 3, 2026. Simplified path.

Where it failed	Example codes	What it tells you
Your settings or rules	`MERCHANT_RULE`, a CVV or AVS decline you activated	You blocked it; review the rule2 5
Your setup	`CONFIG_ERROR`, `TEST_MODE_LIVE_CARD`, `MERCHANT_ACCOUNT_ERROR`	Fix the configuration, not the customer2
The provider	`PROCESSING_ERROR`, `PAYMENT_PROVIDER_ERROR`	A processing problem; try again shortly2
The issuer	`CARD_DECLINED`, `DO_NOT_HONOR`, `INSUFFICIENT_FUNDS`	The bank refused; the customer has the details1 2

Shopify shows "as much information as we receive from your customer's bank" in the order history1. Routing is automatic: with Shopify Payments, transactions "are automatically routed to the payment processor most likely to authorize them"1.

Shopify decline codes, grouped by what you do next

Shopify's OrderTransactionErrorCode has 47 values, 7 of them for Amazon Pay2. The other 40 call for one of seven actions:

What to do	Shopify codes	Retry the same card?
Ask the customer to correct the data	`INCORRECT_NUMBER`, `INVALID_NUMBER`, `INCORRECT_CVC`, `INVALID_CVC`, `EXPIRED_CARD`, `INVALID_EXPIRY_DATE`, `INCORRECT_ZIP`, `INCORRECT_ADDRESS`, `INCORRECT_PIN`	Only with corrected details2
Run authentication	`AUTHENTICATION_REQUIRED`, `AUTHENTICATION_FAILED`	After 3D Secure succeeds2
Offer another card or method	`INSUFFICIENT_FUNDS`, `TRANSACTION_LIMIT_EXCEEDED`, `AMOUNT_TOO_LARGE`, `AMOUNT_TOO_SMALL`, `INVALID_AMOUNT`, `INVALID_CURRENCY`, `INVALID_COUNTRY`, `INVALID_PAYMENT_METHOD`, `INVALID_PURCHASE_TYPE`, `PAYMENT_METHOD_UNSUPPORTED`	Later, within the limits below2 9
Customer calls the bank	`CARD_DECLINED`, `DO_NOT_HONOR`, `CALL_ISSUER`, `INSTRUMENT_DECLINED`, `RETRY_DECLINED`	Sparingly2 9
Stop, show a generic message	`PICK_UP_CARD`, `FRAUD_SUSPECTED`, `CARD_TESTING`	No2 9
Check your own setup or rules	`MERCHANT_RULE`, `CONFIG_ERROR`, `TEST_MODE_LIVE_CARD`, `UNSUPPORTED_FEATURE`, `MERCHANT_ACCOUNT_ERROR`	After the fix2
Try again shortly	`PROCESSING_ERROR`, `PAYMENT_PROVIDER_ERROR`, `PAYMENT_METHOD_UNAVAILABLE`, `GENERIC_ERROR`, `AUTHORIZATION_EXPIRED`, `CANCELLED_PAYMENT`	Once, then another method2

Source: Shopify Dev Docs, OrderTransactionErrorCode, Admin API 2026-10, read November 3, 20262. Apps and reports built before version 2026-04 may group the 20 newer codes under older, vaguer ones3.

PICK_UP_CARD means the card "has been reported as lost or stolen, and the card issuer has requested that the merchant keep the card"2. Never retry it.

DO_NOT_HONOR and CARD_DECLINED

These two mean "no reason given". Shopify describes DO_NOT_HONOR as "The issuer declined the transaction without providing a specific reason" and CARD_DECLINED as "The card was declined"2. Work through this list before sending the customer to the bank:

Check your rules first. A MERCHANT_RULE or an AVS or CVV decline you activated is your own block, not the issuer's2 5.
Check the card details. Shopify notes that card number, expiry date and CVV weigh most; "only American Express uses the cardholder's name in its checks"1.
Look at the customer's history. "A previously successful card might be declined in the future" by the bank's fraud systems1.
Look for an attack. Many declines in a short time on small amounts point to card testing, covered below6.
Then hand over. "It's best to have your customer contact their bank, ask for more information, and ask for future charges to be accepted"1.

Prepaid gift cards have their own causes: no registered billing address or ZIP code, ZIP verification turned on, or a balance below the total with shipping and taxes1.

Declines you cause yourself

Some declines are settings you chose. They protect you from fraud, but they also stop real customers.

Setting	What it does	Trade-off
Collect the CVV	Shopify says collecting it "can significantly improve your decline rates"1	Almost none: turn it on
Decline charges that fail CVV verification	Any attempt that fails is declined, "no order is placed"5	Fewer stolen cards, a few typos lost
Decline charges that fail AVS postal code verification	Off by default; same effect for the ZIP check5	Travelers and new addresses fail; prepaid gift cards without a ZIP fail1
Custom payment risk rules	Block payments that match your rule: `MERCHANT_RULE`2	Each rule has false positives

AVS and CVV filters apply only when the customer's bank supports these checks5. Balancing fraud blocks and approvals: fraud and 3D Secure. Measuring real progress: authorization rate.

Card testing

A spike in declines can be an attack, not lost sales. Shopify describes card testing as fraudsters running card combinations through your checkout: "These attempts can result in many declined transactions, and some might result in placed orders"6.

Fig. 2Decline patterns and what they usually mean

Many small declines in minutesCard testingTreat it as an attack; review orders placed during it
MERCHANT_RULE on real customersYour risk rule is too broadNarrow the rule, keep the CVV check
DO_NOT_HONOR on large first ordersIssuer fraud models on new, big purchases3D Secure, CVV, a second card option
Declines only on gift cardsNo registered ZIP or balance too lowAsk for another card

two of them start on your side

Based on Shopify Help Center (Declined payments, Preventing fraud, Monitoring programs) and the OrderTransactionErrorCode enum, read November 3, 2026.

Why it matters after the attack: "A surge of declined transactions can also increase your decline rate for legitimate customers"6. Visa also monitors it. Its VAMP enumeration track flags merchants at 300,000 enumerated transactions and a 20% enumeration ratio in a month, without fines7. Shopify now returns a dedicated CARD_TESTING code2 3.

Retrying a declined card

The customer retries at checkout; your job is to stay within the network rules when you retry yourself, for example on renewals. Visa allows up to 20 attempts in 30 days for retryable declines, and none after a category 1 decline, such as a lost or stolen card or a closed account9.

An Acquirer, a Merchant, a Payment Facilitator, or a VisaNet Processor that reattempts an Authorization Request following a Decline Response [...] must not intentionally manipulate any data elements from the original Authorization Request.

Visa Core Rules and Visa Product and Service Rules, October 24, 2026, section 1.7.2.1

Sending a declined card to another processor is still a reattempt: a category 1 decline stays final there too9. Spacing and schedules: smart retries. Failed renewals: subscription payment failures and Shopify subscriptions for high-risk brands.

What to tell the customer

Something neutral, every time. The person at your checkout may not be the cardholder.

Watch out

For PICK_UP_CARD, FRAUD_SUSPECTED and CARD_TESTING, don't explain the reason. A message such as "Your bank declined this payment. Try another card or contact your bank" works for every code.

Customers often ask about a charge they see after a decline. Shopify: "Most of the time, failed payment attempts appear as pending charges", which reverse "typically 3-5 days" later, depending on the bank4. If none of your orders matches the amount, tell them it's likely a pending authorization from a failed attempt4.

After a decline, step by step

Open the order's timeline and read the information Shopify received from the bank1.
Match the code to an action in the table above2.
Rule out your own blocks: risk rules, AVS and CVV settings, test mode2 5.
Look for card testing if declines spike on small amounts6.
Give the customer a neutral message and a second way to pay.
Retry within limits: never after a lost, stolen or fraud decline, and no more than Visa allows9.

Based on Shopify Help Center (Declined payments, Pending charges, Configuring Shopify Payments), the OrderTransactionErrorCode enum, read November 3, 2026, and Visa Core Rules, October 24, 2026.

A second way to pay is the part Shopify limits. Only "one credit card payment provider" can be active at a time10.

Shopify Payments can still run beside that provider for Shop Pay, local payment methods and to "recover failed card transactions", at its standard rates "plus a 1.25% premium"8. On Shopify Plus with a contract, this is in early access, by request8. Other options for high-risk stores: high-risk payment processing for Shopify stores.

By industry

Industry	What changes	Guide
Supplements	Big bundles, new customers from ads and renewals on cards that changed	Reducing payment declines for supplement brands
Skincare	Beauty checkouts lose many shoppers; wallets and a clear descriptor matter more	Reducing payment declines for skincare brands
Fitness	Equipment orders with high tickets, memberships on cards that expire	Reducing payment declines for fitness brands
Info products	Cross-border buyers and high-ticket programs	Reducing payment declines for info product businesses
Online pharmacy	Issuer restrictions on regulated purchases	Reducing payment declines for online pharmacies
Telehealth	Recurring visits and FSA or HSA cards	Reducing payment declines for telehealth companies

How Tagada helps

A second route when a card is declined

Routing: "Every transaction is scored against your live MID network in real time." Route to the processor most likely to approve it, and retry on decline, with "no engineering required." TagadaPay reports a +18% approval uplift.11
Works with your Shopify store: "Already on Shopify, WooCommerce, ClickFunnels or BigCommerce? Drop TagadaPay in."11
Fraud and security: "Native 3DS2, device intelligence, and rules engine: approve real customers, block the rest."11
A vault you own: cards, customer profiles and subscription data stay portable, so a second processor doesn't mean re-collecting cards.11

Tagada follows Visa and Mastercard rules and the laws that apply to payments. A category 1 decline stays final on every route. Apply on TagadaPay; CRM plans are on the pricing page.

Apply for processing

Updated on November 3, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

Why are my Shopify Payments being declined?

Most declines come from the customer's bank, and Shopify says most are generic. Check your own settings too: AVS or CVV declines you turned on, and custom risk rules, block payments before the bank answers. A sudden spike in small declines usually means card testing, not lost customers.

What does DO_NOT_HONOR mean on Shopify?

The card issuer declined the payment "without providing a specific reason." It's not a sign that your store did something wrong. Check the card details and the order's size, then ask the customer to call their bank or use another card. Shopify can't see more than the bank sends.

Can I see why a payment was declined on Shopify?

Partly. Shopify shows in the order history as much as the bank sends, and the API returns an error code such as `CARD_DECLINED` or `INSUFFICIENT_FUNDS`. For generic declines, only the cardholder can get the reason, by calling the bank and asking for future charges to be accepted.

Why does my customer see a charge after a declined payment?

It's usually a pending authorization from the failed attempt. Shopify says failed attempts mostly appear as pending charges and reverse within 3 to 5 days, depending on the bank. If no order matches the amount, ask the customer to check with the bank whether it's a hold or a completed charge.

Should I turn on AVS and CVV declines in Shopify Payments?

Collecting the CVV is worth it: Shopify says it can significantly improve decline rates. Declining failed CVV checks blocks stolen cards at little cost. AVS declines are off by default and stop more real customers, such as travelers and prepaid gift cards without a ZIP code. Test both against your own orders.