NewNo plan feeNo plan fee. Just 2.9% + $0.30 per card sale, and signing up is free.Try now →

Checkout.com · Decline codes

What does Checkout.com 41205 “Decline list - Payment IP” mean?

Checked

Checkout.com 41205 "Decline list - Payment IP" means the IP address the payment came from is on your client-level decline list. Checkout.com refuses it before the bank is asked. IP blocks are blunt: offices, mobile carriers and public Wi-Fi share addresses among many people.

Type
Risk response (4xxxx)
Who declined
Your Checkout.com decline list (client level)
Retry
No, while the IP is listed
Shopper action
Try from another network or contact the store
Merchant action
Review IP entries; shared IPs block many people

What PlatformDTC does

PlatformDTC treats Checkout.com 41205 as a fraud stop. The payment is never moved to PayPal card fields or any other processor, because shopping a fraud signal around to a second processor is exactly what card testers do. A subscription renewal declined with 41205 is never retried: the subscription is held past due and the customer is emailed a link to add a new card.

Why it happens

The IP was listed after fraud or card-testing traffic from it.

What the shopper can do

Contact the store, or try again from a different connection.

What the store can do

Keep IP entries short-lived and specific; remove them once an attack has stopped.

For developers

The payment carries response_code 41205 with a response_summary such as "Decline list - Payment IP". For 4xxxx codes Checkout.com says the response_code and status depend on the action set in your Fraud Detection risk strategies, so check the payment's fraud assessment in the Dashboard (Payments > Processing > All payments, then the Payment timeline).

Frequently asked questions

Why would a genuine buyer hit Checkout.com 41205?
They may share an IP with the source of earlier abuse, for example on mobile data.
Is 41205 decided by the bank?
No. Your decline list decided it.

Sources

Related

Payments library