Payment Decline Codes for iGaming Payments Explained

When a player's deposit fails, the issuing bank sends back a two-character payment decline code that says why. Most operators never look at these codes. That's a mistake, because the code tells you whether the deposit was lost for good or whether a smarter retry would have recovered it.

Read the codes properly and you can separate the deposits worth chasing from the ones that will never clear. Read them wrong, or ignore them, and you either abandon recoverable revenue or hammer dead transactions until the card schemes fine you for it.

This guide covers what decline codes are, the soft versus hard split that decides everything, the codes that show up most on gambling traffic, and the retry rules Visa and Mastercard enforce. Facts verified as of August 2026.

What is a payment decline code?

A payment decline code is the response an issuing bank returns when it refuses to authorise a card transaction. It travels back through the card scheme and acquirer to the operator, and it explains, in a standardised format, why the payment failed.

Term: payment decline code. Definition: A standardised response code returned by a card issuer when it declines an authorisation request, indicating the reason the transaction was not approved.

The codes come from the ISO 8583 standard, the messaging format that underpins card authorisation worldwide. Code 00 means approved. Everything else is a decline or a referral, and each value maps to a reason: insufficient funds, expired card, suspected fraud, and so on.

Here's the catch. The code you see isn't always the real reason. Issuers routinely return a generic decline instead of the specific one, either to avoid tipping off fraudsters or because their own system didn't produce anything more precise. So the code is a strong signal, not gospel.

Soft declines vs hard declines: what's the difference?

A soft decline is temporary and may succeed if you try again. A hard decline is permanent and should never be retried. This single distinction drives every sensible retry decision an operator makes.

Soft declines reflect a condition that can change: not enough money in the account right now, a velocity limit hit, a fraud model that fired on one transaction but might pass the next. Insufficient funds (51) and Do Not Honor (05) are the classic examples. Wait, re-present, and a good share of these clear.

Hard declines reflect something that won't change on retry: a closed account, a stolen card, an invalid card number, a transaction the issuer will never approve. Retrying these wastes money and, on the card schemes, actively costs you in penalty fees.

Term: soft decline. Definition: A temporary authorisation failure, such as insufficient funds, that may be approved if the transaction is reattempted within scheme limits.

Term: hard decline. Definition: A permanent authorisation failure, such as a lost or stolen card, that should never be reattempted.

Getting this split right is the foundation of any recovery strategy, and it feeds directly into iGaming approval rates. You cannot lift approvals if you're retrying dead cards and giving up on live ones.

What does decline code 05 (Do Not Honor) mean?

Code 05, Do Not Honor, means the issuer declined the transaction without giving a specific reason. It's a soft decline, and it's the most common decline code by volume for card-not-present merchants, iGaming included.

Do Not Honor is the issuer's way of saying no without saying why. Usually it's the bank's fraud or risk model reacting to something about the transaction: an unfamiliar merchant, a gambling code, a cross-border acquirer, an amount or pattern that looked off. The card is fine. The issuer just wasn't comfortable this time.

Because 05 is so generic and so common, it's also the most recoverable. A retry down a different route, a locally acquired attempt, or a transaction carrying richer authentication data often clears a 05 that failed the first time. Treating every Do Not Honor as a lost cause leaves real money on the table.

What are the most common iGaming decline codes?

The codes below account for most gambling deposit declines. The soft ones are worth a considered retry; the hard ones are not.

• 05 - Do Not Honor (soft). Generic issuer decline, no reason given. The most common code by volume and often recoverable.
• 51 - Insufficient Funds (soft). The player doesn't have the balance. Worth a retry after a delay.
• 61 - Exceeds Withdrawal Amount Limit (soft). The transaction breaches a spending limit on the card.
• 65 - Exceeds Withdrawal Frequency / activity limit (soft). Too many transactions in a window, or an authentication step is required.
• 14 - Invalid Card Number (hard). The number doesn't exist or was mistyped. Do not retry as-is.
• 54 - Expired Card (hard). The card is out of date. Recoverable only with updated credentials, not a straight retry.
• 57 - Transaction Not Permitted to Cardholder (hard). The card type or account isn't allowed to make this purchase - a frequent flag on gambling blocks.
• 59 - Suspected Fraud (hard). The issuer flagged the transaction as fraudulent. Do not retry.
• 04 / 41 / 43 - Pick Up Card, Lost Card, Stolen Card (hard). The issuer wants the card withdrawn. Never retry.
• 62 - Restricted Card (mixed). The card is blocked for this type or region - often a gambling or geographic restriction.

Note that a code's soft or hard status isn't always fixed. Visa reclassifies codes from time to time, and in April 2024 it moved several previously never-retry codes, including 62, into its retryable group. Always work from your acquirer's current mapping rather than a list you saved two years ago.

Why do gambling deposits get declined more often?

Gambling deposits fail more than mainstream retail because the transaction carries the gambling merchant category code, MCC 7995, and issuers treat that code with extra suspicion. The decline often has nothing to do with the individual player.

Three forces stack up here. First, regulatory blocks: in Great Britain the Gambling Commission banned credit card gambling from 14 April 2020, and issuers enforce that by declining gambling-coded credit card transactions outright. Second, voluntary blocks: UK banks such as Monzo and Starling let customers switch on gambling blocks that decline at the MCC. Third, cross-border risk: a foreign issuer seeing a gambling code from an unfamiliar acquirer has every reason to say no.

This is why the same card can fail with one setup and clear with another. The full picture sits in our guide to MCC 7995, and the fix usually starts with local acquiring, which puts a domestic issuer, domestic acquirer and recognised licence in front of the transaction.

Can you retry a declined payment?

Sometimes, and the card schemes set hard limits on it. Retrying the wrong code, or retrying too often, triggers penalty fees that turn a recovery effort into a cost centre.

Visa groups response codes into categories and treats them very differently. Category 1 codes mean the issuer will never approve, and a reattempt is prohibited: every single retry draws an excessive reattempt fee, reported at US$0.10 for domestic and US$0.15 to US$0.25 for cross-border transactions. Category 2 codes can be reattempted up to 15 times in any 30-day period; the 16th attempt is excessive. The rules are set out in Visa's own guidance on declined transaction resubmission.

Mastercard uses Merchant Advice Codes (MACs) to tell you what to do next. MAC 03, "do not try again", and MAC 21, payment cancellation, are the stop signs: retrying either can draw an excess authorisation fee, reported at up to US$0.50 per attempt since January 2025. Other MACs signal when to retry - MAC 24 after an hour, MAC 25 after a day, and so on.

The takeaway is simple. Retries have to be code-aware. A blanket "try three times" rule will breach both schemes' rules on hard declines and quietly bleed fees. This is one of the strongest arguments for payment orchestration, which can read the code and route the retry down a different acquirer only when the code allows it.

How do operators recover declined deposits?

The best recovery is the decline that never happens. Most of the levers that cut declines are the same ones that lift approval rates, and they work before any retry is needed.

• Keep card credentials current. Visa's Account Updater and the Mastercard equivalent refresh reissued and expired cards automatically, killing 54 declines before they occur.
• Use network tokens. Tokens survive card reissues and score better in issuer risk models. See our guide to network tokens for iGaming.
• Send strong authentication data. A transaction backed by 3D Secure gives the issuer more reason to approve a borderline 05.
• Acquire locally. Domestic acquiring turns risky cross-border gambling traffic into home-market transactions issuers recognise.
• Route retries intelligently. Retry soft declines down a different acquirer, respect the scheme categories, and never retry a hard decline.

Provider choice decides how many of these you can actually use. The iGamingPayments.ai directory lists PSPs and acquirers by region and vertical, and you can size the revenue at stake with our approval rate uplift calculator. For the surrounding terminology, the payments glossary defines the codes and concepts referenced here.

Frequently asked questions

What does decline code 05 mean?

Code 05, Do Not Honor, is a generic issuer decline with no specific reason attached. It's a soft decline, usually produced by the issuer's own fraud or risk model, and it's the most common decline code by volume for card-not-present merchants, including iGaming operators. Many 05 declines are recoverable with a smarter retry.

Can I retry a declined iGaming deposit?

It depends on the code. Soft declines such as 05 and 51 can be retried within scheme limits - Visa permits up to 15 reattempts of a Category 2 code in any 30-day period. Hard declines, including Visa Category 1 codes and Mastercard Merchant Advice Code 03, must not be retried, and each attempt can trigger a penalty fee.

Is it safe to keep retrying a failed card?

No. Retrying a hard decline breaches Visa and Mastercard rules and draws per-attempt penalty fees. Even soft declines are capped - Visa's excessive reattempt fee applies once you pass 15 attempts in 30 days. Retries must be code-aware, not blanket.

What happens if I ignore a Mastercard Merchant Advice Code?

Ignoring MAC 03 ("do not try again") or MAC 21 (payment cancellation) and retrying anyway can trigger an excess authorisation fee, reported at up to US$0.50 per attempt since January 2025. The other MAC values tell you how long to wait before a legitimate retry, so reading them protects both your approval rate and your fee bill.

Why do licensed casino deposits still get declined?

Because the issuer, not the casino, blocks the transaction. Credit card gambling is banned in Great Britain, some banks decline gambling MCCs by default, and many players have voluntary gambling blocks switched on. Cross-border gambling transactions also score worse in issuer risk models, so the same card often clears with a locally acquired operator.

Does a decline code tell me if the card is fraudulent?

Only some do. Codes 59 (suspected fraud), 41 (lost card) and 43 (stolen card) point to fraud or a compromised card and should never be retried. A generic 05, by contrast, rarely means fraud - it's usually a cautious issuer, not a bad card.

How much can better decline handling improve approval rates?

It varies by market and card mix, but separating soft from hard declines and recovering soft ones is one of the cheapest approval-rate gains available. Combined with local acquiring, network tokens and account updaters, operators routinely recover a meaningful share of first-attempt failures. Model the revenue impact with our calculator before your next PSP review.

Find the right payment provider for your operation

Browse 342+ vetted PSPs, crypto processors, open banking providers and fraud vendors - filtered by region, vertical and payment method. Or run the numbers before your next PSP negotiation.