Is code 65 a 3-D Secure decline?

On Mastercard it can be: an Identity Check soft decline. On Visa it is a frequency limit.

How long until a code 65 card works again?

When the bank's limit period resets, or immediately after the cardholder authenticates on Mastercard.

Card issuer response codes (ISO 8583) · Decline codes

What does card decline code 65 mean?

Checked October 31, 2026

Code 65 is an ISO 8583 issuer response code. Visa defines it as "exceeds withdrawal frequency limit"; Mastercard as "exceeds withdrawal count limit", or an Identity Check soft decline asking for EMV 3-D Secure authentication. The card has been used too many times in the bank's limit period, or Mastercard wants the cardholder authenticated. Visa lists 65 in Category 2, allowing up to 20 reattempts in 30 days.

Type: Soft decline (frequency limit or authentication)
Who declined: The card's issuing bank
Visa category: Category 2 (issuer cannot approve at this time): up to 20 reattempts in 30 days
Retry: Later, or at once with 3-D Secure on Mastercard
Shopper action: Wait and retry, complete authentication, or use another card
Merchant action: Use 3-D Secure; retry later
PlatformDTC renewal (Smart retry): Retried 2, 5 and 8 days after the decline (4 attempts max)

What PlatformDTC does

PlatformDTC files a raw 65 as temporary. With Smart retry on, a renewal is retried 2, 5 and 8 days after the decline, four attempts at most, and the email speaks of the bank not being reached rather than missing money. At checkout a Visa 65 is "try later" and is not moved to a backup processor.

Why it happens

Banks cap how many payments a card can make in a period. On Mastercard, 65 also means the bank wants the cardholder to pass Identity Check, Mastercard's 3-D Secure.

What the shopper can do

Complete the bank's verification if asked, wait for the limit to reset, or use another card.

For developers

On Stripe the raw issuer code arrives in charge.outcome.network_decline_code (here "65"), next to Stripe's own decline_code. Read it together with the card brand: the same two characters can mean different things on Visa and Mastercard. Mastercard's table: "Exceeds withdrawal count limit (or Identity Check soft-decline of EMV 3DS authentication)". When the processor returns authentication_required, PlatformDTC holds the renewal for the customer instead of retrying.

Frequently asked questions

Is code 65 a 3-D Secure decline?: On Mastercard it can be: an Identity Check soft decline. On Visa it is a frequency limit.
How long until a code 65 card works again?: When the bank's limit period resets, or immediately after the cardholder authenticates on Mastercard.