Checkout and Payments Experience

Handling Failed Payments and Card Declines

Why online payments fail, how to word error messages that help instead of blame, and how to make retrying easy for shoppers who want to buy.

On this page
  1. A failed payment is not always a lost sale
  2. Common reasons payments fail
  3. Wording error messages that help
  4. Make retrying painless
  5. Recover shoppers who leave
  6. Watch the pattern, not just single cases
  7. What not to do

A failed payment is not always a lost sale

A shopper who reaches the payment step and tries to pay has made a decision. If the payment fails, they are not rejecting your product; they have hit a technical or financial snag. How your store responds often decides whether they try again, switch to another method or leave.

It helps to understand that a decline is a decision made by someone else, usually the shopper’s bank or card issuer, or by a fraud check somewhere along the way. Your store typically sees only a limited reason, and sometimes only a generic one. That is deliberate: detailed reasons could help criminals more than honest customers.

Common reasons payments fail

The exact causes vary, but these come up often:

  • Typing errors. A wrong digit in the card number, an incorrect expiration date or the wrong security code.
  • Address mismatch. Some systems compare the billing address entered with the one on file for the card. Small differences can cause a failure.
  • Insufficient funds or a credit limit. The shopper may not know their available balance.
  • Expired or replaced cards. A card has been reissued and the old number no longer works.
  • Issuer caution. The bank may flag an unusual purchase, a first-time merchant, a large amount or a purchase from another country, and block or ask for extra verification.
  • Extra authentication not completed. Many regions require additional identity checks for online card payments, such as a code sent to a phone or an approval in a banking app. If the shopper closes the window, ignores the prompt or the message does not arrive, the payment fails.
  • Card not enabled for online or international use. Some cards are limited by their owners or issuers.
  • Technical problems. Timeouts, connection drops or temporary outages at your payment provider or the bank.
  • Your own fraud rules. If you use automated screening, it may reject legitimate orders. More on that in the article on order screening.

Because the reasons are so mixed, the page should never assume the shopper did something wrong.

Wording error messages that help

A good message does three things: says what happened, says what to do next, and keeps a calm, respectful tone.

Compare:

  • Weak: “Payment failed.” or “Error 402.”
  • Better: “Your payment didn’t go through. Your card has not been charged. Please check your card details or try another payment method.”

Guidelines:

  • Be reassuring about money. If it is true, say that nothing was charged. Shoppers worry about double charges. Be careful, though: some banks place a temporary hold that disappears later, so avoid overpromising. A phrase such as “You have not been charged for this order” is only safe if your system confirms it.
  • Avoid blame. “Invalid card” sounds accusatory. “We couldn’t process this card” is more neutral.
  • Do not reveal too much. For security, avoid messages that confirm which exact detail is wrong when it could help someone testing stolen numbers. The same caution applies to the patterns described in the article on card testing attacks. Keep it general where a precise reason would be risky, but be specific about fields that are plainly a format error, such as a missing digit.
  • Suggest concrete next steps: re-enter the details, try a different card, use another payment method, or contact their bank for an issuer block.
  • Offer a way to reach you, such as an email address or contact form, in case they are stuck. Good support matters here, as discussed in the pieces on support tips and the broader value of customer service.
  • Put the message where the eye is. Show it near the payment area, move the focus to it, and make it readable by assistive technology, not just colored red.

Make retrying painless

The biggest mistake is making someone start over. Instead:

  1. Keep the cart, contact details and delivery choices exactly as they were.
  2. Preserve non-sensitive fields. Card numbers and security codes are often cleared for safety, but names and addresses should stay.
  3. Return the shopper directly to the payment step, not the beginning.
  4. Offer alternative payment methods prominently. If the shopper’s first choice failed, a second route may succeed. Having a variety of payment methods available helps here.
  5. Do not create duplicate orders. If a payment times out, the shopper might click again. Your system should recognize the same attempt so it does not charge twice or create two orders. Test this deliberately.
  6. Be clear about stock. If items are held in the cart during retries, say for how long, if you hold them at all.

Recover shoppers who leave

Some people will leave anyway. If you captured their email before the failure, and they have agreed to be contacted, a considerate message with a link back to their cart can bring some of them back. Keep it simple and low-pressure, and see the article on cart reminder emails for how to do that respectfully.

Watch the pattern, not just single cases

A few declines are normal. A sudden rise can mean something is wrong: a misconfigured provider connection, an overly strict fraud rule, a broken authentication step on a certain browser, or a spike of automated attempts. Check payment reports regularly, compare decline rates by payment method and device, and place periodic test orders. If you suspect your gateway setup, review how your payment gateways are configured or ask their support.

Repeated declines also have a different side: a flood of failed attempts with many different card numbers can signal abuse rather than customer trouble, which is a fraud concern in its own right.

What not to do

  • Do not ask shoppers to email card details. Ever.
  • Do not store full card numbers yourself; leave that to a compliant provider, in line with PCI compliance.
  • Do not promise that a retry will work; sometimes the issuer has to be contacted.
  • Do not use alarming language such as “Fraud suspected” toward customers.

Failed payments cannot be eliminated, since many causes sit outside your control. But clear wording, a forgiving retry path and varied payment options can recover a meaningful share of attempts that would otherwise vanish.

The complete guide to checkout and payments experience

Checkout Design That Reduces Friction
Read the guide

Keep exploring

Guides from other topics

All topics →