Card declines at the iGaming cashier run roughly 13 percent on regulated US sportsbooks under MCC 7801, per PayNearMe's iGaming card-cost analysis, and meaningfully higher on offshore-licensed books. After a deposit fails, 27 percent of bettors retry the same method on the same screen and 17 percent leave the operator's site entirely. The retry path is where the cashier recovers conversion or wastes it twice.
Most retry logic in production at May 2026 is one generic loop on every decline. Same wait, same screen copy, same payload. That pattern reads as automation to the issuer's risk model, racks up Visa and Mastercard penalty fees on the codes that should never have been retried, and leaves measurable conversion on the table. The playbook below is code-keyed: which codes to retry, how long to wait by code cluster, what the decline screen says on the way back to the player, and what the issuer's model reads on the second attempt. The SERP for soft-decline retry is wall-to-wall definitional explainers from subscription billing vendors. None of them is a cashier playbook for .
Visa categories and Mastercard advice codes are the routing key
The four-digit decline response is a routing key, not a single signal. Visa groups response codes into four categories with explicit retry rules per the Cardpointe Visa decline reference and Qualpay's grouping guide. Mastercard's Merchant Advice Code (MAC) field appended to the decline message gives the same shape with timing windows attached, per the Mastercard merchant advice codes overview.
Visa's grouping:
| Category | Examples | Retry rule |
|---|---|---|
| 1, issuer will never approve | 03, 04, 07, 12, 14, 15, 41, 43, 57, 62, 78, 93, R0, R1, R3 | Do not reauthorize |
| 2, issuer cannot approve at this time | 19, 51, 59, 61, 65, 75, 86, 91, 96, N3, N4 | Reauthorize permitted, wait |
| 3, data quality, revalidate before retry | 14 (alternate read), 54, 55, 82, N7 | Retry after collecting better data |
| 4, generic, no recommendation | All others | Reauthorize permitted |
Mastercard's MAC values that drive retry decisions:
| MAC | Meaning | Retry action |
|---|---|---|
| 01 | Updated account information available | Refresh credentials via Account Updater |
| 02 | Cannot approve at this time, try again later | Retry permitted, no fixed window |
| 03 | Do not try again | No retry, fee applies on retry and on the original decline starting Jan 2026 |
| 04 | Token requirements not fulfilled | Fix the token, then retry |
| 21 | Payment cancelled | No retry, fee applies |
| 22 | Merchant does not qualify for product code | No retry |
| 24 | Retry after 1 hour | Wait 1 hour |
| 25 | Retry after 24 hours | Wait 24 hours |
| 26 to 30 | Retry after 2, 4, 6, 8, 10 days | Wait the specified window |
The single behavior change that produces measurable lift on a cashier today is treating the response code as the input to the retry logic rather than a binary "decline equals retry" trigger. Solidgate, IXOPAY, Primer, and Worldpay's own orchestration all expose the response code in their webhook payloads. The build is reading it, branching on it, and acting differently per branch.
The never-retry set and what blind retries cost
Visa Category 1 is the floor. The Visa rules for declined transaction resubmission prohibit retrying these codes, per the ReduxPayments hard-decline reference. The codes that hit an iGaming cashier most often:
- 04, 07, 41, 43: pickup card, lost, stolen. The card is reported and the issuer will never approve a transaction on it. Every retry adds to the operator's fraud-event count without recovering revenue.
- 14, 78: invalid account number, no such account. Number is wrong or the account was closed. A retry on the same number always fails.
- R0, R1, R3: revocation of authorization, stop-payment. The cardholder told the issuer to block this merchant. A retry contradicts the cardholder's explicit instruction.
- 57, 62: transaction not permitted to cardholder, restricted card. Issuer-side rule on the card itself, independent of merchant or amount.
Mastercard's MAC 03 and MAC 21 are the parallel set on the Mastercard rail. Either MAC means the network is telling the merchant the request is final. Retrying the same card and amount inside 30 days incurs the Mastercard MAC fee, and starting January 2026 the same fee applies on the original decline as well, per the merchant cost consulting tracker of TPE program fees.
The cost is small per event and large in aggregate. Visa charges $0.10 per reattempt above 15 in any 30-day window for domestic transactions, and $0.15 to $0.25 for cross-border. Mastercard charges $0.03 per CNP decline carrying MAC 03 or 21 starting January 2026, plus separate fees on retries beyond the 10-per-24-hour and 35-per-30-day thresholds.
$0.03 per decline
Mastercard TPE program MAC fee, expanded January 2026
Applied to every CNP decline tagged MAC 03 (do not try again) or MAC 21 (payment cancelled). Previously the fee only hit retries of those codes within 30 days. For an MCC 7995 book at high CNP volume, every never-retry decline now triggers $0.03, and every retry of the same codes triggers it again. Source: Mastercard TPE program 2026 changes per merchantcostconsulting.com.
The indirect cost is heavier than the per-event fee. Retries on lost-or-stolen codes generate fraud reports when the issuer rules them as fraud, and reports feed the VAMP ratio ( + ) divided by . Under the April 2026 1.5 percent merchant excessive threshold, an operator that retries every lost-or-stolen decline is funding its own problem on top of the per-event fees.
The build is straightforward. The cashier orchestrator routes each decline through a code lookup. Codes in the never-retry set return immediately to the player with an APM-only fallback. Everything else proceeds to the retry-timing branch. The wider cashier UX patterns that the retry-screen sits inside cover method ordering, fee display, and PIN-only step-down on returning depositors.
Three timing windows: immediate, four-hour, twenty-four-hour
Retry timing keys to what the response code says about why the issuer declined.
Immediate failover is the right move when the response signals issuer-side or network-side downtime rather than a cardholder constraint. Visa codes 91 (issuer or switch unavailable), 96 (system malfunction), and Cat 4 system errors fall here. The cardholder is at the deposit page now, and the issuer's primary path was unreachable. Retrying through a backup acquirer in real time, per Primer's issuer-downtime guidance, routes around the issue without making the player wait. Operators on multi-acquirer orchestration through Solidgate, IXOPAY, or Primer get this as a configuration toggle. Operators on a single direct acquirer cannot do it at all and lose the deposit.
Four-hour wait fits codes that reflect a temporal cardholder constraint clearing inside a daypart. Mastercard MAC 24 codifies this exactly with a "retry after 1 hour" instruction, attached most often to short-window insufficient-funds and frequency-limit cases. Visa code 65 (exceeds withdrawal frequency) clears once the bank's frequency window rolls. The practical operator wait sits at 1 to 4 hours rather than the player's full session.
Twenty-four-hour wait is the right window for funds-availability declines, where the issuer is signaling the account does not currently have the money. Visa code 51 (insufficient funds) and Mastercard MAC 25 ("retry after 24 hours") both land here. Paddle's retry-timing analysis reported a 6.5 percent recovery improvement when subscription billing moved retries from a 2-hour to a 24-hour window. The cashier read is the same: a player whose Tuesday attempt failed on insufficient funds frequently has Wednesday paycheck money. Mastercard's MAC 26 through MAC 30 extend the discipline out to 10 days for repeat-failure cases.
The MAC integration is the way to pick the window because Mastercard publishes the issuer's preferred wait time in the response itself. An orchestrator that ignores the MAC and uses a fixed schedule is leaving recovery on the table on accounts the issuer was telling it exactly when to retry.
The session-context layer matters on a cashier in a way it does not for subscription billing. A player who bounced off a deposit attempt is unlikely to come back in 24 hours unaided. A same-session retry inside the 1-to-4-hour window with a different deposit vehicle (APM, smaller card amount, alternate card) is the realistic recovery path. The 24-hour window is a CRM problem, not a cashier problem: a triggered email or push at the right moment, not a passive retry queued in the orchestrator.
Retry-screen copy that does the work
The default decline screen ships as a generic two-line message: "Transaction declined. Please try again or use a different payment method." That copy fails on three counts. It tells the player nothing about what happened, it does not suggest a specific action that would recover, and it treats every decline the same. Players who got the same wall on attempt one and attempt two have no reason to act differently the second time.
Code-keyed copy moves the recovery rate. Examples that ship in production at operators running discrete copy per decline cluster:
[Code 51 / MAC 25, insufficient funds]
"Your bank says this card does not have $50 available right now.
Try a smaller amount, or pay with Apple Pay, Trustly, or Neteller."
[ Try $25 ] [ Try $20 ] [ Use Apple Pay ]
[Code 65 / MAC 24, withdrawal frequency limit]
"Your bank's daily limit on this card was reached.
Try again in a few hours, or use a different card now."
[ Try a different card ] [ Use Apple Pay ] [ Remind me later ]
[Code 05, do not honor]
"Your bank declined this and did not say why.
A smaller deposit or Apple Pay or Trustly usually clears."
[ Try a smaller amount ] [ Use Apple Pay ]
[Code 14, invalid account number]
"The card number did not match the issuer's record.
Re-enter the number, or use a different card."
[ Re-enter card ] [ Use a different card ]
Three patterns drive the lift. The first is naming the constraint. "Your bank's daily limit was reached" is more actionable than "transaction declined" because the player's next thought is "switch to another card" rather than "the casino broke." Per the PayNearMe bettor-behavior data, 27 percent of bettors retry the same method on a default decline screen. Copy that names the constraint and offers a different path lifts the share that picks the path.
The second is the dual-track CTA. The retry button stays, but it sits next to an APM-fallback button at the same visual weight. The retry preserves conversion when the second attempt clears. The APM fallback captures the player who would otherwise leave. Praxis documented this exact split in its Retry with APM feature, which surfaces an open-banking alternative inside the decline screen rather than after the player leaves.
The third is the smaller-amount nudge for funds-related codes. A player who got 51 on $50 will frequently clear on $20 or $25 because the actual bank balance is somewhere between. Stripe's Optimized Checkout Suite tested across 50-plus global payment methods reported a 2x conversion lift when Apple Pay sat at the top of checkout instead of inside an "other methods" panel. The same UX principle applies on the decline screen: the recovery option goes above the fold, and the player's previous inputs stay populated. Asking the player to re-enter the card number after every decline is the highest-friction option the cashier can pick, and the populated state is a five-minute frontend change rather than an integration project.
Issuer narrative on attempt two: change one thing
The issuer's risk model on the second attempt sees the same cardholder, the same merchant, the same approximate amount, and a small time delta. Identical retries inside 30 seconds read as automated. The issuer's score tightens on attempts two and three. A second attempt that does not look like a copy of the first is the one most likely to clear.
Three levers shift the read.
The first is amount. A player whose $50 attempt returned code 51 has more headroom on $25 because the actual balance is below $50 but above $25. Beyond clearing the funds-availability check, the smaller amount produces a different transaction signature that the issuer's pattern-matching does not immediately bucket as a retry. Re-presenting the same amount inside a five-minute window invites the same decline; cutting it in half changes the question.
The second is channel and authentication. A typed-PAN attempt that returned 05 (do not honor) often clears on a network-tokenized retry through Apple Pay or Google Pay because the token carries device-binding signals and the cryptogram. Per Solidgate's authorization-rate optimization data, network tokenization lifts approval rates by up to 15 percentage points on tokenized cohorts. The same card on a wallet looks different to the issuer than the same card typed.
The third is 3DS step-up. A second attempt that includes a 3DS challenge presents the issuer with stronger cardholder-authentication evidence than the first. Inserting 3DS on the retry, even when the first attempt was frictionless, is sometimes the recovery path for codes 05 and 51 on issuers whose risk teams treat retries as elevated-risk by default.
The pattern operators that recover well on attempt two share is changing exactly one thing per attempt rather than the whole package. Different amount, same card, same channel reads cleanly as "the cardholder is adjusting." Different card, different amount, different channel reads as "someone is testing." Changing the amount on attempt two and the channel on attempt three tells a coherent story to the issuer's model. Changing everything at once tells a confused one.
The build implication is that the orchestrator has to track attempt history per session, including what changed between attempts, and shape the retry payload accordingly. Most retry orchestrators in 2026 expose this surface; using it deliberately is a configuration choice the operator has to make.
The penalty math the orchestrator has to clear
Smart retries earn their keep by recovering revenue above the network-fee tax they generate. For a cashier at 500,000 monthly card-not-present transactions and a 13 percent decline rate, the math has four lines.
Mastercard MAC fee at $0.03 per CNP decline carrying MAC 03 or 21, applied to the slice of declines tagged with those MACs, runs in the low thousands per month at this volume per the merchant cost consulting TPE tracker. The fee is unavoidable on the first decline and stacks on every retry of MAC 03 or 21 inside 30 days. The operator's only lever is not retrying those codes.
Visa excess-reattempt fee at $0.10 domestic and $0.15 to $0.25 cross-border, applied to retries above 15 per 30-day window per cardholder per merchant, hits operators that brute-force every soft decline regardless of code. A book that retries every code 51 four times across a month on the same card hits the cap on its highest-decline-frequency cards, where the math compounds. The cap does not matter on the median card and matters a lot on the top decile.
The recovery side has to clear both. Paddle reported a 20.2 percent failed-payment recovery lift from three additional retries inside the dunning window, and a 6.5 percent improvement from moving from a 2-hour to a 24-hour first retry. Solidgate's authorization-rate framework puts intelligent retry logic at +11.6 percent average LTV uplift on recovered soft declines and network tokenization at up to +15 percentage points on tokenized cohorts. Multiply through against a cashier at 500,000 CNP per month and the recoverable revenue from a code-keyed retry build is two orders of magnitude above the penalty fees.
The break-even is the never-retry set. Operators who route the never-retry codes to APM-fallback rather than to retry do not pay the Visa $0.10 excess-reattempt fee or trip the Mastercard MAC 03/21 retry fee. The recovery rate on the rest of the deck is high enough that the smart-retry investment pays back within the first month at any non-trivial volume tier. The brute-force retry build can underperform by costing more in penalty fees than the marginal recovery delivers, especially as the January 2026 expansion of the MAC fee broadens the perimeter from retries to original declines.
The playbook compresses to one rule per code, one timing window per cluster, one screen copy per cluster, and one change per attempt. Operators running that build recover on the conversion side and stay below the network-side fee and TAR-damage thresholds. Operators retrying every decline with the same wait, the same screen, and the same payload pay the network fees on the way down and the conversion loss on the way up.
Sources (15)
- 01PayNearMe: The True Cost of Accepting iGaming Card Payments
- 02Visa: Updates to rules for declined transaction resubmission and use of authorization response codes
- 03Cardpointe: Visa Decline Rules and Responses
- 04Qualpay: Visa's Decline Code Grouping
- 05ReduxPayments: What are Hard Declines, why retrying Visa Category 1 codes risks your merchant account
- 06ChargebackGurus: New Mastercard Merchant Advice Codes for Smarter Retries
- 07Chargebacks911: What are Mastercard Merchant Advice Codes
- 08Mastercard TPE Program Fees, 2026 update tracker (Merchant Cost Consulting)
- 09Solidgate: Authorization rate optimization, the 2026 playbook
- 10Solidgate: Smart retries from failed payments to revenue recovery
- 11Paddle: Soft declines, how to diagnose and prevent them
- 12Primer: How to manage soft declines and recover lost payments
- 13Praxis Tech: Decline Recovery, Retry with APM
- 14Stripe: Testing the conversion impact of 50+ global payment methods
- 15Visa Acquirer Monitoring Program fact sheet 2025