Skip to content

Decline code 04: Pick Up Card

Jay StevensBy Jay Stevens · Principal EngineerReviewed by Jordan MederichUpdated 3 min read
Summarize with AI

Quick answer

Decline code 04 — “Pick Up Card” — is an ISO 8583 response telling the merchant to retain the physical card: the issuing bank has flagged it as lost, stolen, closed, or compromised. It’s a hard decline, so retrying the same card almost never clears it. Stripe surfaces the same issuer decision as the pickup_card decline_code, and NMI returns it as response code 252 (Stolen card). Recovering it takes customer outreach for a new card, not re-attempts.

What code 04 means

Hard declineDo not retry

Never blind-retry a 04 — the issuer is asking the merchant to retain the card, which signals a closed, reported, or compromised account. Recovery needs customer outreach for a different payment method, not re-attempts on the same card.

Cross-processor equivalents

The same issuer decision surfaces under a different code on every processor. Here is how code 04 maps across the stacks Revatto recovers on.

ISO 8583
Code04
CalledPick Up Card
Stripe
Codefraudulent
CalledFraudulent
Braintree
Code2014
CalledFraud Suspected
Authorize.net
Code66
CalledFailed gateway securityresponseReasonCode 66; AFDS filters 250–254
NMI
Code252
CalledStolen card
Chargebee
Codefraudulent
CalledFraudulent
Recurly
Codefraudulent
CalledFraudulent
IxoPay
Code2010
CalledSuspected fraudadapterCode 34 also maps here
Shopify
CodeFRAUD
CalledFraud
Whop
Codefraud_decline
CalledSecurity declinenormalized — no processor-specific code (free-text categorized)
Fanbasis
Codefraud_decline
CalledSecurity declinenormalized — matched by substring rule, no processor-specific code

Why it happens

  • The cardholder reported the card lost or stolen, so the issuer wants it retained.
  • The bank closed or froze the account and flagged the card as no longer valid.
  • The issuer’s fraud systems flagged the card as compromised or part of a breach.
  • A counterfeit or duplicated card was detected on the account.
  • An expired or reissued card the cardholder kept using after the bank invalidated it.

How to recover it

  1. 1Don’t re-run the same card — a 04 means the card is gone for good, and repeated attempts trip issuer fraud and velocity rules.
  2. 2Reach the customer on a channel they answer — email and SMS — explain the bank flagged their card and ask them to add a different payment method.
  3. 3Make the card update effortless: a single secure link to a hosted update page beats asking them to log in and hunt for billing settings.
  4. 4
    When the customer goes quiet, a real person — not another automated email — works the card update directly. That AI-plus-human handoff is exactly what Revatto does for you: AI-timed retries where the API supports it, plus email, SMS, and human outreach, fully done-for-you. You only pay if it works — 20% of the first recovered payment, $0 setup, $0 monthly, cancel anytime.See how Revatto recovers 04declines →

See what Revatto would recover for you

Failed payments recovered automatically — no engineering, no manual chasing. We do the work; you keep the revenue.

See Your Recovery Potential

Frequently asked questions