Transaction Rejection Reasons

In order to provide more information on each rejection, on our rejected transaction webhook event (transaction_status == "rejected"), we provide an additional field: rejection_reason, to further narrow down the reject reason/error classification.

The rejection_reason field will be omitted on approved transaction webhook events.

List of Rejection Reasons

Rejection Reasons	Explanation or Example Scenarios
ACCOUNT_NOT_FOUND	Remote Host Authorization response error code is `CARD0004 - Card Not Found`.
CARD_LIMIT_EXCEEDED	Transaction spend attempt exceeds the card's purchase (`TRANSACTION`) limit. Card's spend limit can be created from this endpoint.
CARD_RESTRICTIONS	Transaction is rejected because the card is restricted due to country/region-related policies.
CARD_IS_NOT_PRESENT	Card number is not found. Note that when card is not found in our system, event fields`acquirer_currency`, `card_opaque_id` , `cbs_transaction_id`, `currency` will be `""` , `acquirer_amount` and `transaction_amount` will be `"0.00"` .
CARD_TOKEN_NOT_PRESENT	Card token is not found.
CARD_IS_LOST	Card status is lost.
CARD_IS_STOLEN	Card status is stolen.
CARD_IS_SUSPENDED	Card status is suspended.
CARD_IS_INACTIVE	Card status is inactive.
CARD_IS_BLOCKED_BY_FRAUD	Card status is blocked by fraud.
CARD_IS_PERM_BLOCK	Card status is permanently blocked.
CARD_IS_INVALID	Card status is invalid.
CARD_TOKEN_SUSPENDED	Card token is suspended.
CARD_TOKEN_INACTIVE	Card token is inactive.
CARD_TOKEN_DEACTIVATED	Card token is deactivated.
CARD_TOKEN_HAS_EXPIRED	Card token has expired.
CARD_TOKEN_EXPIRATION_DATE_IS_EMPTY	Card token expiry date is blank or unavailable.
CONTRACT_NOT_PRESENT	Contract is not found.
CBS_IS_NOT_AVAILABLE	Remote Host Authorization server is down, or request timed-out.
DUPLICATE_TRANSACTION	Reversal's original transaction is already reconciled. Remote Host Authorization response error code is `CARD0002 - Duplicate Transaction ID`.
ERRORS_IN_SOFTWARE	Remote Host Authorization response error code is `CARD0000 - Internal Server Error` or `CARD0005 - Unauthorized`. Issuing plan's maintenance mode is enabled. Issuer system errors.
FRAUD_NOT_PERMITTED_TO_TERMINAL	Ours or your system (via Remote Host Authorization error code `CARD0007`) rejects a transaction that is suspected as fraudulent.
INSUFFICIENT_BALANCE	Remote Host Authorization response error code is `CARD0001 - Insufficient Balance`.
INSUFFICIENT_SPENDABLE_BALANCE	Client's spendable balance is insufficient to support transaction.
ORIGINAL_TRANSACTION_NOT_FOUND	Remote Host Authorization response error code is `CARD0003 - Transaction Not Found`.
VIAA_LIMIT_EXCEEDED	Issuing group daily VIAA limit exceeded. To increase your daily VIAA limit, please request for an increase of your card network (Visa) collateral.
CVV2_VALIDATION_FAILED	Provided CVV2 in authorization request does not match the stored CVV2 for the card.
CAVV_VALIDATION_FAILED	Cardholder Authentication Verification Value (CAVV) cryptogram validation fails for 3DS transaction.
TRACK_2_VALIDATION_FAILED	Track 2 data (from magnetic stripe or EMV fallback) is invalid.
CRYPTOGRAM_VALIDATION_FAILED	Cryptogram in EMV or contactless transaction is invalid.
PIN_VALIDATION_FAILED	Entered or transmitted PIN does not match the encrypted PIN.
TOO_MANY_CONSECUTIVE_PIN_FAILURES	Cardholder exceeds the allowed number of consecutive incorrect PIN attempts.
PIN_NOT_CONFIGURED	Transaction requires online PIN verification. But, the card or account has no PIN configured.
PER_TRANSACTION_LIMIT_EXCEEDED	Transaction spend amount exceeds issuing group or card-level per-transaction limit. You can create a custom card-level per-transaction limit from this endpoint.
OCT_FIRST_PARTY_VALIDATION_SENDER_NAME_NOT_MATCHED	Specific to Original Credit Transaction (OCT), you will receive this reject reason when Sender Name data forwarded by Visa does not match user/cardholder's KYC Full Name.
BLOCKED_BY_CARDHOLDER	Config/limitation that can be controlled by both issuer and cardholder. And cardholder can opt-in/out from the config itself. Examples: Card present transaction is disabled. Any other cardholder configuration that you're able to verify and reject on behalf by replying with error code `CARD0010` on Remote Host Authorization.
TRANSACTION_NOT_SUPPORTED_OR_BLOCKED_BY_ISSUER	Config/limitation that can be controlled by either our system or yours. And cardholder cannot opt-out/exempt themselves from this limitation. Examples: Cross-border transaction disabled on issuing plan-level. Cash withdrawal disabled on issuing plan-level. Policies or limitations that you control on your side that has no better fitting Remote Host Authorization error code. In this case, reply with `CARD0009`.
VIOLATION_OF_LAW	Remote Host Authorization response error code is `CARD0008 - Violation of Law`.
INVALID_MERCHANT	Transaction's Merchant ID or MCC is blocked by either us or your system via Remote Host Authorization response error code `CARD0014 - Invalid Merchant`.
WITHDRAWAL_LIMIT_EXCEEDED	Cash withdrawal amount has exceeded a set threshold on a certain timeframe. Can be enforced by either us or client via Remote Host Authorization response error code `CARD0015 - Cash Withdrawal Amount Exceeded`.
CASH_WITHDRAWAL_FREQUENCY_EXCEEDED	Cash withdrawal frequency/velocity is exceeded. Can be enforced by either us or client via Remote Host Authorization response error code `CARD0016 - Cash Withdrawal Velocity Exceeded`.
STOP_THIS_PAYMENT	Remote Host Authorization response error code is `CARD0017 - Stop This Payment`. Acquirer merchant will be instructed to stop retrying this specific recurring payment.
UNKNOWN	Unclassified error.