PayPal · Decline codes
What does PayPal processor response code 5110 mean?
Checked
PayPal processor response code 5110 (CVV2_FAILURE) means the security code on the card, the 3 or 4 digit CVV2, did not match the bank's record, so the payment was declined. The shopper should re-enter the code exactly as printed or use another card. Merchants should let the shopper correct it rather than retrying the same code.
- PayPal label
- CVV2_FAILURE
- Type
- Data error
- Who declined
- The card's bank (via PayPal)
- Similar Visa code
- N7 (Decline for CVV2 failure): Visa Category 3 (revalidate payment information): reattempts allowed, up to 20 in 30 days
- Retry
- No, not on the same card
- Shopper action
- Type the security code again
- Merchant action
- Ask the shopper to correct it; no blind retries
- PlatformDTC renewal
- No retry; one-click update-card link and reminders
What PlatformDTC does
PlatformDTC maps PayPal 5110 to incorrect_cvc, a decline no retry can fix. On either retry schedule (the default Fixed schedule or Smart retry), the renewal is never re-attempted on that card: the subscription is held past due (not cancelled) and the customer gets a one-click update-card link, re-sent up to 4 times per cycle. If those reminders run out and the store's auto-cancel setting is on, the subscription ends as involuntary churn.
Why it happens
The CVV2 entered differs from the bank's.
What the shopper can do
Check the code on the back of the card (front on American Express) and enter it again.
What the store can do
Prompt the shopper to correct the code, then offer another method if it fails again.
Watch for many failed codes from one visitor: that's how card testing looks.
For developers
PayPal returns 5110 in processor_response.response_code on the capture (purchase_units[].payments.captures[]) or authorization of a card payment. PayPal's own name for it is CVV2_FAILURE.
Visa has a similarly named raw response code, N7 ("Decline for CVV2 failure"); in the Visa Core Rules (24 October 2026, Table 7-2) that code is category 3 (revalidate payment information): reattempts allowed, up to 20 in 30 days. PayPal's code list doesn't map its codes to Visa's, so treat this as context, not a translation.
The processor_response object also carries cvv_code, the security-code check result, which helps support tell a typo from a mismatch.
Frequently asked questions
- Is a CVV2 failure fraud?
- Not by itself: PayPal's label only says the security code check failed. It becomes a warning sign when one visitor cycles through many codes or many cards.
- What is the difference between 5110 and 00N7?
- PayPal labels 5110 CVV2_FAILURE and 00N7 CVV2_FAILURE_POSSIBLE_RETRY_WITH_CVV. Both point to the security code; the fix is to enter it correctly.
Sources
Related
- 00N7 — CVV2 failure, retry with CVV: the security code failed; try again with the right one.
- PCVV — CVV failure: the card security code check failed.
- 1382 — Invalid card verification value: the security code (CVV) was rejected.
- 5120 — Insufficient funds: the card doesn't have enough money or credit for this payment.
- 5140 — Card closed: the card's account has been closed by the bank or cardholder.
- 5150 — Pick up card, special conditions: the bank wants this card out of use.
- 5160 — Unauthorized user: the person paying isn't authorized to use this card.
- 5170 — AVS failure: the billing address didn't match the bank's records.