Stripe decline code
invalid_cvc
The CVC security code is malformed — the wrong length or otherwise not a valid code. (This differs from incorrect_cvc, where the code is well-formed but doesn't match.)
Why it happens
- The customer entered an incomplete or mistyped security code.
- Corrupted or partial stored card data.
- The wrong card was used.
Should you retry it?
No — the customer must update their card
A malformed CVC can't be accepted on retry. The customer must re-enter their card with a valid code.
How to recover it
Ask the customer to re-enter their card on a secure update page so a valid CVC is captured.
Recoverly does not retry this code. It triggers the reminder sequence with a Stripe-hosted card-update page so the customer can add a working card in one click.
See how much failed-payment revenue you can recover
Connect Stripe (we only read) and Recoverly shows your recoverable revenue in 30 seconds.
Related decline codes
Recoverly retries up to 4 times within 30 days. This page is informational and not affiliated with Stripe.