PayPal · Decline codes
What does PayPal processor response code 5160 mean?
Checked
PayPal processor response code 5160 (UNAUTHORIZED_USER) means the payment was refused because the user isn't authorized to use the card for this payment. PayPal gives no more detail than that label. The shopper should pay with a card they hold in their own name or ask the bank, and the merchant should offer another payment method rather than retrying.
- PayPal label
- UNAUTHORIZED_USER
- Type
- Hard decline
- Who declined
- The card's bank (via PayPal)
- Retry
- No, not on the same card
- Shopper action
- Use a card in your own name or ask the bank
- Merchant action
- Don't retry; offer another method
- PlatformDTC renewal
- No retry; one-click update-card link and reminders
What PlatformDTC does
PlatformDTC treats 5160 as transaction_not_allowed, a hard decline. On either retry schedule (the default Fixed schedule or Smart retry), nothing is retried on the same card; the merchant dashboard says the customer needs to pay with a different card, and the customer receives a signed update-card link (no login) plus up to 4 reminders per billing cycle.
Why it happens
PayPal's label says the user isn't authorized. That fits cases like an additional cardholder without permission for this purchase, but PayPal doesn't specify.
What the shopper can do
Use another card or your PayPal balance; the card's main account holder can ask the bank about permissions.
What the store can do
Ask for a different payment method.
If this pattern repeats on one account, review the order before shipping.
For developers
PayPal returns 5160 in processor_response.response_code on the capture (purchase_units[].payments.captures[]) or authorization of a card payment. PayPal's own name for it is UNAUTHORIZED_USER.
Keep the raw code with the order. PayPal's label is the only official meaning, and the exact code tells support which branch of PayPal's table fired.
Frequently asked questions
- Is 5160 a fraud decline?
- PayPal doesn't label it as fraud; it says the user is unauthorized. It is still worth a second look if paired with other risk signals.
- Will 5160 pass if retried?
- Not with the same card and user. PlatformDTC treats it as a hard decline.
Sources
Related
- 0580 — Unauthorized transaction: the payment isn't authorized for this card.
- 5700 — Transaction not permitted: outside the scope of accepted business for this card.
- 5180 — Invalid or restricted card: this card can't be used; PayPal says try another.
- 5170 — AVS failure: the billing address didn't match the bank's records.
- 5200 — Duplicate transaction: a matching payment was already submitted.
- 5400 — Expired card: the card is past its expiry date.
- 5650 — SCA required: the bank needs the cardholder to authenticate the payment.