Card issuer response codes (ISO 8583) · Decline codes
What does card decline code 59 mean?
Checked
Code 59 is a Visa issuer response code in the ISO 8583 set meaning "suspected fraud". The bank's fraud system blocked the payment, often because it looks unlike the cardholder's normal spending. Visa lists 59 in Category 2, "issuer cannot approve at this time", so reattempts are allowed up to 20 in 30 days. The cardholder can confirm the purchase with their bank, or pay with another card.
- Type
- Soft decline (fraud screen)
- Who declined
- The card's issuing bank
- Visa category
- Category 2 (issuer cannot approve at this time): up to 20 reattempts in 30 days
- Retry
- Only with the cardholder present and authenticated
- Shopper action
- Confirm the purchase with the bank or use another card
- Merchant action
- Use 3-D Secure; never retry blindly
- PlatformDTC renewal (fixed or Smart retry)
- Never retried; customer asked for a new card
What PlatformDTC does
PlatformDTC is stricter than Visa on 59. On either retry schedule, fixed or Smart retry, a renewal declined 59 is never retried, even when Stripe labels it do_not_honor; the customer gets a link to confirm or add a card. At checkout, a Visa 59 may be offered to the store's backup processor only with 3-D Secure, which requires the cardholder to verify the payment with their bank.
Why it happens
The bank's risk model flagged the payment: an unusual amount, a new merchant, a foreign site, or a pattern seen in fraud. It may be a genuine customer the bank isn't sure about.
What the shopper can do
Approve the payment in the banking app or call the bank, then try again. Another card or PayPal also works.
What the store can do
Run 3-D Secure so the cardholder can prove it's them. Don't re-present the card off-session: it asks the same fraud model the same question.
For developers
On Stripe the raw issuer code arrives in charge.outcome.network_decline_code (here "59"), next to Stripe's own decline_code. Read it together with the card brand: the same two characters can mean different things on Visa and Mastercard. Stripe can surface Visa 59 as decline_code do_not_honor with advice try_again_later, so only the raw code tells it apart from a vague 05. PlatformDTC's checkout routing table marks Visa 59 "reroute with 3-D Secure".
Frequently asked questions
- Can I retry a code 59 decline?
- Visa allows it, but blind retries ask the bank's fraud model the same question. Retry only with the cardholder present and authenticated.
- Is the customer a fraudster if they get 59?
- Not necessarily. Banks flag many genuine purchases. Treat it as unconfirmed, not as proven fraud.
Sources
Related
- 05 — Do not honor: the bank refused the payment and gave no reason.
- 07 — Pick up card, special condition: the account is flagged for fraud. Never retry.
- 43 — Stolen card, pick up: the card was reported stolen. Never retry it.
- 61 — Exceeds approval amount limit: the payment is over a limit the bank set on the card.
- 62 — Restricted card: the card can't be used here, often because of region or country.
- 63 — Security violation: the bank declined for a security reason.
- 65 — Exceeds withdrawal frequency limit: too many payments on the card in a short time.
- 75 — PIN tries exceeded: too many wrong PIN entries locked the PIN.