Skip to content
Aashna Jain

What is a soft decline, and why did my card work the second time?

3 min readFor everyoneTrust and riskTRUST AND RISK · 17 OF 19

The bank did not say you have no money. It said not like that, try again.

Two kinds of no
Your bankHard declinedo not ask againSoft declineCheckoutask again, differently

Only one of these is about the money.

What the bank is actually objecting to

Every decline carries a response code, and the codes divide roughly in two.

Hard declines mean something permanent. The card is reported lost or stolen, the account is closed, the number does not exist. Retrying a hard decline is not just futile, it is penalised. Card schemes cap how many times a merchant may re-present a permanently declined card, and exceeding it costs money.

Soft declines mean something situational. The issuer's authorisation system timed out. The transaction tripped a velocity rule because you bought three things in ninety seconds. Additional authentication was required and was not supplied. The funds were briefly unavailable because a hold had not yet released. None of these say the card is bad. They say this particular attempt, in this particular shape, was not acceptable.

Why the second attempt works

Usually because something quietly changed between the two attempts, and it was rarely the money.

The commonest cause is authentication. The first attempt arrived without a step-up and the issuer wanted one. The second attempt carried a 3D Secure result, so the liability picture changed and the issuer approved. From your side this looks like the same payment twice. From the issuer's side it was two materially different requests.

The second commonest is timing. Authorisation systems are real infrastructure and they have bad seconds. A timeout is not a decision, it is the absence of one, and the network has to return something. It returns a decline.

The third is a velocity or risk rule that has since decayed. Fraud engines score on recent behaviour, and recent behaviour ages out in minutes.

What this means if you are building

The single biggest recoverable revenue line in most checkouts is soft declines that were never retried, or were retried badly.

Retry logic worth writing: never retry a hard decline. Retry a soft decline on a schedule rather than immediately, because an immediate retry usually reproduces the same conditions. Change something on the second attempt, ideally by adding authentication rather than by simply resending. And cap it, because the schemes count your attempts and so does the customer's patience.

The failure mode I would watch for is a retry loop that looks successful in your dashboard and reads as three declines on the customer's banking app. They may have paid. They will still be frightened.

Two ways of being turned away at a counter. One is that your account is closed, and returning tomorrow with a better pen changes nothing. The other is that you filled in the form in the wrong colour ink. Same word at the counter, same walk back to the door, completely different instruction about what to do next.

Where you meet it

Every time a card worked on the second tap. Every subscription that renewed three days late without anyone telling you. Every checkout that said something went wrong and would not say what.

Get the next one in your inbox.

New fundamentals and one memo every two weeks.

Or subscribe on Substack ↗