Skip to main content

Authentication Failures

A possible outcome of an authentication is a failure. In order to handle the cases and to prevent further issues, it is important to understand the different failure reasons. The EMV 3-D Secure protocol offers a numeric value to indicate such authentication errors in a standardized way.

Hellgate® refers to this value as status_reason_code. The attribute is available on any failed authentication. Please see our API reference for more details.

Authentication Failures

Status Reason CodeDescription
01Card authentication failed
02Unknown device
03Unsupported device
04Exceeds authentication frequency limit
05Expired card
06Invalid card number
07Invalid transaction
08No Card record
09Security failure
10Stolen card
11Suspected fraud
12Transaction not permitted to cardholder
13Cardholder not enrolled in service
14Transaction timed out at the Access Control Server (ACS)
15Low confidence
16Medium confidence
17High confidence
18Very High confidence
19Exceeds Access Control Server (ACS) maximum challenges
20Non-Payment transaction not supported
213RI transaction not supported
22Access Control Server (ACS) technical issue
23Decoupled Authentication required by ACS but not requested by 3DS Requestor
243DS Requestor Decoupled Max Expiry Time exceeded
25Decoupled Authentication was provided insufficient time to authenticate cardholder.
26Authentication attempted but not performed by the cardholder

VISA specific Failures

Status Reason CodeDescription
80Error connecting to ACS
81ACS timed out
82Invalid response from ACS
83System error response from ACS
84Internal error while generating Cardholder Authentication Verification Value (CAVV)
85Visa Merchant ID (VMID) not eligible for requested program
86Protocol version not supported by ACS
87Transaction is excluded from attempts processing — includes non-reloadable prepaid card and Non-Payments (NPA)
88Requested program not supported by ACS
89CAVV is included in response
90Issuer Strong Customer Authentication (SCA) required

Mastercard specific Failures

Status Reason CodeDescription
80Transactions processed as Identity Check Insights
81Acquirer exemption accepted
82Challenge mandate requested, but could not be performed by Smart Authentication Stand-In
83Directory Server (DS) dropped reason code received from ACS
84Challenge cancelation indicator populated, therefore did not route to Smart Authentication Stand-In