Stripe decline code
invalid_cvc
The CVC security code is malformed — the wrong length or otherwise not a valid code. (This differs from incorrect_cvc, where the code is well-formed but doesn't match.)
Primary source: Stripe’s official decline codes reference
Why it happens
- The customer entered an incomplete or mistyped security code.
- Corrupted or partial stored card data.
- The wrong card was used.
Should you retry it?
No — the customer must update their card
A malformed CVC can't be accepted on retry. The customer must re-enter their card with a valid code.
How to recover it
Ask the customer to re-enter their card on a secure update page so a valid CVC is captured.
Retrying won't fix this code — the customer has to act. Recoverly's approve-first sequence emails the customer a Stripe-hosted payment page where they can update their card in one click. Recoverly never charges or retries cards itself.
See how much failed-payment revenue you can recover
Connect Stripe (we only read) and Recoverly shows your recoverable revenue in 30 seconds.
Related decline codes
Written by the Recoverly team · Published June 25, 2026 · Last reviewed July 17, 2026
Recoverly finds invoices Stripe’s retries left unpaid and — with your approval — sends payment-update emails, then verifies what actually came back. This page is informational and not affiliated with Stripe.