Stripe decline code
incorrect_cvcThe card verification code (CVC) provided does not match what the bank has on file.
Type
Recoverable
Frequency
Commonincorrect_cvc usually indicates customer input error or a stolen card with the wrong CVC. It can also occur when a customer rotates to a new card (new CVC) without updating their subscription. Because the bank will never disclose the correct CVC, retrying is pointless without new input from the customer.
Do not retry. Route to a card re-entry flow. If you see a sudden spike in incorrect_cvc, investigate whether it is a fraud attack (card testing).
Ask the customer to re-enter their card including the CVC. Frame it as a security check the bank requires.
Permanent issue. The card cannot be charged. Customer must provide a new payment method.
No. If the CVC is wrong, it will always be wrong until the customer provides a new one. Most issuers also block the card after 3 consecutive CVC failures.
How Rebounce handles incorrect_cvc
Rebounce classifies every failed payment by its Stripe decline code and applies the optimal recovery strategy automatically. For incorrect_cvc, that means a limited retry window combined with customer outreach. Multi-channel follow-up through email, SMS, WhatsApp, and in-app banners ensures the customer actually sees the message.
invalid_cvcHard declineThe CVC provided is not formatted correctly (wrong length or contains non-digits).
incorrect_zipHard declineThe ZIP or postal code entered does not match the billing address the bank has on file for this card.
expired_cardHard declineThe card has passed its expiration date. This is a hard decline: retrying will never succeed until the card is replaced.