"Payment declined" feels like something broke. Usually nothing did. Somewhere in the chain, most often at the bank that issued the customer's card or holds their account, a system looked at the payment and decided not to approve it. There's always a reason, and the reason decides whether trying again makes sense.
This guide is about declines specifically: refusals by a bank or a risk system. Failures from timeouts, downtime or broken checkouts are a different problem, covered in our guide to why online payments fail. If you were debited and the payment still failed, see money debited but transaction failed for RBI's reversal deadlines.
Declined, failed or pending?
The three outcomes call for different responses:
| Outcome | What happened | Money taken? | What to do |
|---|---|---|---|
| Declined | The bank or a risk system refused the payment | Normally no | Fix the reason, or use another method |
| Failed | Something technical broke before the payment completed | Sometimes, then reversed | Check for a debit before retrying |
| Pending | The final result isn't known yet | Possibly | Wait for the result; don't pay twice |
Who can decline a payment
Several parties can say no, and the message you see rarely says which one did:
- The customer's bank or card issuer: by far the most common. It checks funds or credit limit, card or account status, authentication, its own limits and fraud signals.
- Network and scheme rules: limits such as UPI's per-transaction caps, or a transaction type that isn't allowed.
- The payment provider: risk checks on the merchant's side, such as unusual amounts or patterns, or a payment method not enabled for that merchant.
- The merchant's own rules: some businesses block certain countries, card types or high-risk patterns.
What decline codes are
When a bank refuses a card payment, it sends back a response code with the refusal. The code travels through the card network to the merchant's payment provider, which usually translates it into its own code and a message. UPI has its own response codes for the same purpose.
That translation is why the same decline can look different in different places: each card network, UPI and each provider keeps its own list and wording, and providers group codes into their own categories. So rather than memorising codes, it's more useful to know the handful of categories that almost every decline falls into. If you run a checkout, your provider's documentation maps its codes to these.
The main decline categories
These cover the vast majority of declines, whatever the exact code:
| Category | Usually means | What fixes it | Retry? |
|---|---|---|---|
| Insufficient funds or credit | Not enough balance or credit limit | Add funds, or use another account or card | Later, after the fix |
| Limit exceeded | A per-payment, daily or category limit was hit, set by the bank or the network | Wait for the reset, raise the limit in the banking app, or use another rail | After the reset or change |
| Authentication failed | Wrong UPI PIN, OTP or other second factor, or the 3D Secure step failed | Re-enter carefully; reset the PIN if forgotten | Yes, once |
| Card or account restricted | Online, international or contactless use is off; card blocked, expired or not activated; account frozen or dormant | Enable the usage, or contact the bank | After the fix |
| Invalid details | Wrong card number, expiry or CVV, or a wrong UPI ID | Correct the details | Yes, with correct details |
| Suspected fraud or risk | The bank's or provider's risk checks flagged the payment | Confirm with your bank through its official channel | Only after the bank clears it |
| Not permitted | The transaction type or merchant category is blocked for this card or account | Use another method | Not with the same method |
| Issuer unavailable | The bank's systems didn't respond in time | Nothing on your side | Yes, after a few minutes |
For UPI, "limit exceeded" is especially common, because there are several layers of limits: NPCI's caps, higher caps for some merchant categories, and your own bank's limits, which can be lower. Our guide to UPI transaction limits explains each.
Declines by payment method
The same categories show up differently depending on how the customer pays:
| Method | Most common decline reasons | Worth knowing |
|---|---|---|
| UPI | Wrong UPI PIN, insufficient balance, per-transaction or daily limit, bank not responding | Your bank's limit can be lower than NPCI's; a different UPI app uses a different PSP but the same bank account and limits |
| Debit card | Insufficient balance, online or international use switched off, OTP failure, daily card limit | Online and international usage can be switched on in most banking apps |
| Credit card | Credit limit reached, OTP failure, risk check on an unusual purchase, card blocked after a missed payment | A new or unusual merchant is a common trigger for the bank's risk checks |
| Net banking | Wrong password or OTP, session timeout, bank's own transfer limit | Usually a login or session problem rather than a refusal |
| Recurring mandate | Insufficient balance on the debit date, mandate paused or revoked, amount above the mandate's limit | A pre-debit notice goes out at least 24 hours before most UPI AutoPay and card e-mandate debits |
Soft declines and hard declines
Payment teams sort declines into two kinds, and the split is the most useful idea in this guide.
| Compared on | Soft decline | Hard decline |
|---|---|---|
| Meaning | Could succeed later, or with an extra step | Won't succeed without a real change |
| Examples | Insufficient funds, issuer unavailable, authentication needed, limit reached for today | Card closed, lost or stolen, invalid account, transaction type not permitted |
| Retrying the same payment | May work later, or after authentication | Pointless, and can trigger fraud checks |
| Best response | Retry at a sensible time, or ask the customer to authenticate | Ask for a different payment method |
What "do not honour" means
"Do not honour" and "declined by bank" are the least helpful messages, because they're generic refusals: the bank declined without giving a specific reason. Often it's a risk or fraud check, sometimes a restriction on the card, occasionally something the bank won't disclose to the merchant. Only the bank can say which. The customer should check their banking app for alerts or blocks, then contact the bank through its official number. Retrying again and again rarely helps and can make the bank more suspicious.
For customers: what to do after a decline
Work out which kind of decline it was, then act once rather than retrying blindly:
- Read the message. Even a vague one usually points to a category in the table above.
- Check you weren't debited, in your bank SMS or app. A genuine decline normally takes nothing.
- Fix the obvious causes: balance, card enabled for online or international use, correct details.
- If the message mentions authentication, try once more carefully. Our 3D Secure guide explains the OTP step for cards.
- If it says declined by bank or do not honour, or the same decline repeats, stop and contact your bank. Several declines in a row can lead the bank to block the card temporarily.
- Try another method: UPI instead of a card, another card or net banking. Each takes a different route.
For merchants: turning declines into data
Every decline is a lost sale until it's recovered, and declines that look random usually aren't. A few practices make the difference:
- Record the category of every decline, not just "failed", together with the payment method, the issuing bank or card range, the amount and the time.
- Separate declines from technical failures in your reports. Declines are mostly the customer's bank's decision; technical failures are yours or your provider's to fix.
- Don't automatically retry hard declines. For soft declines, follow your provider's retry rules; card networks and providers can restrict repeated attempts on the same card.
- Show the customer a helpful message for their category ("your bank declined this card; try another method"), without exposing fraud-rule details.
- Offer an easy switch to another method on the same screen, especially UPI after a card decline.
- Watch for spikes from one bank or card range. A sudden rise usually means an issue at that bank, not with your customers.
Routing can help with technical failures and provider outages, but it doesn't change an issuer's decision: a card the bank won't approve stays declined whichever provider sends it. Our explainer on smart payment routing covers what routing can and can't recover.
Declines on recurring payments
Subscriptions and EMIs meet a particular kind of decline: the mandate is fine, but the account doesn't have the funds on the day. Because a pre-debit notice goes out at least 24 hours before each UPI AutoPay or card e-mandate debit, the notice is a natural moment to remind customers to keep funds available. When a recurring debit is declined, tell the customer promptly, give them a simple way to pay that instalment, and retry only as your provider and the mandate rules allow. Our guide to UPI AutoPay explains how mandate debits work.
Frequently asked questions
Why does my card keep getting declined online?
The commonest reasons are online or international use being switched off for the card, the OTP step failing, insufficient funds or limit, or your bank's fraud checks. Check your banking app's card settings and alerts, and if it says declined by bank, call your bank's official number.
Why was my payment declined when I have enough balance?
Balance is only one check. The payment may have crossed a per-transaction or daily limit set by your bank or by UPI, failed authentication, been blocked because online or international use is off, or been flagged by your bank's risk checks. The decline message, or your bank, will tell you which.
What does "do not honour" mean?
It's a generic refusal from your bank, without a specific reason. It's often a risk check or a restriction on the card. Only your bank can tell you why, so contact it rather than retrying repeatedly.
Is money deducted when a payment is declined?
Normally not. If you were debited, the payment failed after the debit rather than being declined, and your bank must reverse it within RBI's deadline for that payment type.
What is the difference between a soft and a hard decline?
A soft decline might succeed later or with an extra step, such as after adding funds or authenticating. A hard decline won't succeed without a real change, such as a different card, because the card is closed or the details are invalid.
Where can I find the meaning of a decline code?
Decline codes differ between card networks, UPI and payment providers. If you run a checkout, your payment provider's documentation maps its codes to reasons. As a customer, the message on screen and your bank are the best guides.
Go deeper
Official sources
- RBI — Authentication mechanisms for digital payment transactions Directions, 2025Two-factor authentication requirement and issuers' risk-based checks.
- RBI — Digital Payments – E-mandate Framework, 2026 (21 Apr 2026)Pre-debit notice at least 24 hours before recurring debits.
- RBI — Harmonisation of Turn Around Time and customer compensation for failed transactions (20 Sep 2019)Reversal deadlines when a payment fails after a debit.
Last reviewed . Examples, amounts and screens marked illustrative are not LILPE figures.
