PayPal · Decline codes
What does PayPal processor response code PCVV mean?
Checked
PayPal processor response code PCVV (CVV_FAILURE) means the card security code check failed, so the payment was declined. The 3 or 4 digit code entered didn't match the card. The shopper should type the code again exactly as printed, or use another card. Merchants should let the shopper correct it rather than resubmitting unchanged details.
- PayPal label
- CVV_FAILURE
- Type
- Data error
- Who declined
- PayPal or the card's bank
- Retry
- No, not on the same card
- Shopper action
- Re-enter the security code
- Merchant action
- Let the shopper correct it; no blind retries
- PlatformDTC renewal
- No retry; one-click update-card link and reminders
What PlatformDTC does
A PayPal card payment declined PCVV is stored by PlatformDTC as incorrect_cvc and counted as permanent. On either retry schedule (the default Fixed schedule or Smart retry), automatic renewal attempts stop at once, the subscription is held past due rather than cancelled, and the customer is emailed a one-click way to add a new card.
Why it happens
The security code entered didn't pass the check.
What the shopper can do
Look at the back of the card (front for American Express) and enter the code again.
What the store can do
Show the security-code field again after the decline.
Many failed codes from one visitor is a card-testing pattern worth blocking.
For developers
PayPal returns PCVV in processor_response.response_code on the capture (purchase_units[].payments.captures[]) or authorization of a card payment. PayPal's own name for it is CVV_FAILURE.
The processor_response object also carries cvv_code, the security-code check result, which helps support tell a typo from a mismatch.
Frequently asked questions
- Why does PayPal have several CVV codes (PCVV, 5110, 00N7, 1382)?
- They come from different parts of PayPal's processing. For the shopper the fix is identical: enter the correct code.
- Does PlatformDTC retry a CVV failure?
- No. It records it as incorrect_cvc, a hard decline, so with Smart retry on it isn't re-attempted.
Sources
Related
- 5110 — CVV2 failure: the card's security code didn't match.
- 00N7 — CVV2 failure, retry with CVV: the security code failed; try again with the right one.
- 1382 — Invalid card verification value: the security code (CVV) was rejected.
- PP06 — Account closed: a previously open account is now closed.
- PPRN — Reattempt not permitted: another attempt on this payment isn't allowed.
- PPAB — Account blocked by issuer: the card's bank has blocked the account.
- PPAD — Billing address: the payment was refused over the billing address.
- PPAX — Amount exceeded: the payment is over a limit on the card or account.