Card decline code
authentication_required: Authentication required
The bank requires the cardholder to authenticate the payment, usually with 3D Secure. Common in Europe under Strong Customer Authentication rules. The customer must complete the check.
What authentication_required means
authentication_required means the issuer will only approve the charge after the cardholder authenticates it, typically through a 3D Secure prompt in their banking app.
For subscription renewals charged in the background, the customer is not present, so you need to bring them back to authenticate.
Should you retry the payment?
Retrying off-session will be declined again. Send the customer a link where they can complete authentication.
How to recover a subscription payment declined with authentication_required
- Email the customer a link to a hosted payment page that runs the 3D Secure check.
- Remind them on WhatsApp, since authentication requests are time-sensitive.
- Once they authenticate, the invoice is paid and future renewals usually go through.
What to tell the customer
Explain that their bank needs them to confirm the payment and give them a one-click link.
"Hi Sam, your bank needs you to confirm this month's $49 Acme payment. Tap here to approve it in a few seconds."
More wording for every situation is in our dunning email templates.
How Revnio handles authentication_required
Revnio records authentication_required on the failed payment, follows your retry schedule (by default 1, 3, 5 and 7 days, adjusted for the customer's value and plan, and moved to weekday business hours), and emails the customer a secure link to pay or update their card. WhatsApp (Pro plan) reminders follow if the email is not clicked. The Insights page shows how often each decline code recovers for you. On Paddle, Paddle runs the payment retries itself and Revnio handles the customer outreach.
Decline codes are returned by the card issuer through your payment processor. Code names here follow Stripe's; Chargebee and Paddle surface the same issuer reasons with their own wording. Last reviewed 2026-10-15.
Frequently asked questions
Why do subscription renewals need authentication?
Under Strong Customer Authentication in Europe and the UK, banks can ask for 3D Secure even on recurring charges. When they do, the cardholder has to approve the payment themselves.
What does decline code authentication_required mean?
The bank requires the cardholder to authenticate the payment, usually with 3D Secure. Common in Europe under Strong Customer Authentication rules. The customer must complete the check.
Should I retry a payment declined with authentication_required?
Not without the customer. Retrying off-session will be declined again. Send the customer a link where they can complete authentication.
Can Revnio recover payments declined with authentication_required?
Revnio picks up the failed payment from Stripe, Chargebee or Paddle, adjusts retry timing to the decline code, and reaches the customer by email and WhatsApp (SMS is coming soon) with a secure link to pay or update their card.
Recover failed payments on autopilot
Revnio retries failed payments at the right time and reaches customers by email and WhatsApp until the card is fixed. Works with Stripe, Chargebee and Paddle.
Related
- do_not_honorThe issuing bank declined the payment without giving a reason. It is a catch-all code: the cause might be a fraud check, an account restriction or the bank's own rules.
- generic_declineThe payment was declined for an unspecified reason. Stripe also returns generic_decline when its own fraud screening blocks a charge, and for lost, stolen or fraudulent cards it reports to customers.
- incorrect_cvcThe security code entered with the card is wrong. The customer needs to re-enter their card details.
- All decline codesEvery common card decline code, grouped by what to do next.
- Dunning email templatesCopy-ready emails for each kind of failed payment.