Stripe incorrect_cvc: What It Means and How to Fix It
incorrect_cvc means the security code entered does not match the bank record. The card is valid but the data is wrong. Do not retry without updated details.
Contents
incorrect_cvc means the CVC or CVV security code entered at checkout does not match what the issuing bank has on file for the card. The card itself is valid and the account is in good standing. The problem is a data mismatch.
What does incorrect_cvc mean?
Every payment card has a card verification value (CVC or CVV) printed on it, typically 3 digits on the back for Visa and Mastercard or 4 digits on the front for American Express. When a charge is submitted, Stripe sends this value to the issuing bank for verification. If the value does not match the bank's record, the charge fails with incorrect_cvc.
For subscription payments, this most often happens when a customer updates their payment details and makes a typo entering the CVC. The card number and expiry may be correct, but a single wrong digit in the CVC causes the charge to fail.
Is incorrect_cvc retryable?
Not without updated card details. Retrying with the same incorrect CVC will produce the same result. The bank is not going to authorize a charge where the security code is wrong, regardless of how many times you try. Like expired_card, this is a card data error that requires customer action rather than a retry.
Do not retry. Email the customer to correct their payment details.
How to handle incorrect_cvc
Email the customer on day 1.
incorrect_cvc is a card data error, not a temporary condition. The customer needs to re-enter their payment details. A short email explaining their payment did not go through, written in plain language, not billing-system language, with a direct link to your payment update page is the right first step.
Keep the message simple. The customer made a typo. The email should not alarm them. A straightforward "we had trouble processing your payment, please update your card details" message is appropriate. No need to mention CVCs specifically.
Follow up at day 3 and day 7. Some customers miss the first email. Two follow-ups spaced a few days apart catch most of them.
What Recova does with incorrect_cvc
Recova classifies incorrect_cvc as a card data error and routes it to an immediate email sequence with no retry attempts. An AI-written email goes out on day 1 with a direct link to the payment update page. Follow-ups fire at day 3 and day 7 if the payment method has not been updated.
- What does incorrect_cvc mean on Stripe?
- The CVC security code entered for the card does not match the issuing bank's record. The card is valid but the security code data is wrong.
- Can I retry an incorrect_cvc decline?
- No. Retrying with the same incorrect CVC will fail again. The customer needs to re-enter their card details with the correct security code.
- Should I tell the customer their CVC was wrong?
- You can, but keeping it simple works better. A message like "we had trouble processing your payment, please update your card details" is less alarming and gets the same result.
- Is incorrect_cvc different from invalid_cvc?
- Functionally identical for recovery purposes. incorrect_cvc means the code was provided but does not match; invalid_cvc means the format was wrong. Both require the customer to re-enter their card details.
- How quickly should I email after an incorrect_cvc decline?
- Day 1. Unlike soft declines where silent retries come first, incorrect_cvc requires customer action immediately. There is no retry strategy that works without updated card details.
