PayPal · Decline codes
What does PayPal processor response code 1382 mean?
Checked
PayPal processor response code 1382 (INVALID_CARD_VERIFICATION_VALUE) means the card's security code was rejected. The shopper should enter it again carefully or use another card. Merchants should not keep resubmitting the same card with different codes. PayPal returns this code on card payments processed through PayPal, such as PayPal card fields.
- PayPal label
- INVALID_CARD_VERIFICATION_VALUE
- Type
- Data error
- Who declined
- The card's bank (via PayPal)
- Retry
- No, not on the same card
- Shopper action
- Re-enter the security code
- Merchant action
- Let the shopper correct it; don't loop retries
- PlatformDTC renewal
- No retry; one-click update-card link and reminders
What PlatformDTC does
PlatformDTC treats 1382 as incorrect_cvc, a hard decline. On either retry schedule (the default Fixed schedule or Smart retry), nothing is retried on the same card; the merchant dashboard says the customer needs to pay with a different card, and the customer receives a signed update-card link (no login) plus up to 4 reminders per billing cycle.
Why it happens
The security code didn't match the bank's record. A typo is the usual reason; a different card than the shopper thinks they're using is another.
What the shopper can do
Look at the back of the card (front for American Express) and type the code again.
What the store can do
Let the shopper fix the code once or twice, then suggest another payment method.
Many security-code failures in a row from one visitor are a classic card-testing pattern; block rules exist for that.
For developers
PayPal returns 1382 in processor_response.response_code on the capture (purchase_units[].payments.captures[]) or authorization of a card payment. PayPal's own name for it is INVALID_CARD_VERIFICATION_VALUE.
The processor_response object also carries cvv_code, the security-code check result, which helps support tell a typo from a mismatch.
Frequently asked questions
- How many times can a shopper retry the security code?
- PayPal doesn't publish a number. A couple of corrections is normal; a long run of failures on one card is what fraud systems watch for.
- Does a saved card need its security code again?
- A subscription renewal is charged without it. If the code was the problem at checkout, the customer simply re-enters the card.
Sources
Related
- 5110 — CVV2 failure: the card's security code didn't match.
- PCVV — CVV failure: the card security code check failed.
- 00N7 — CVV2 failure, retry with CVV: the security code failed; try again with the right one.
- 5100 — Generic decline: the card was refused and no reason was given.
- 5120 — Insufficient funds: the card doesn't have enough money or credit for this payment.
- 5140 — Card closed: the card's account has been closed by the bank or cardholder.
- 5150 — Pick up card, special conditions: the bank wants this card out of use.
- 5160 — Unauthorized user: the person paying isn't authorized to use this card.