What does decline code 01 mean on an online order?

The issuing bank declined the automatic authorization and wants manual verification. Online, the practical fix is for the cardholder to call their bank, confirm the purchase is legitimate, and then try again.

Is code 01 the customer's fault or mine as the merchant?

Usually neither. The issuer's risk system chose to require a referral. It can be triggered by the cardholder's spending pattern or by your merchant category, so check whether 01 declines cluster around specific issuing banks.

Can I retry a transaction that got code 01?

Yes, but only after the customer contacts their bank. Retrying immediately with no change almost always returns the same code and burns one of your allowed retry attempts under card network rules.

Decline code · Soft decline

Decline code 01: Refer to Card Issuer

The issuing bank is not approving the transaction electronically and wants a manual referral instead. In card-present retail this historically meant calling the issuer's authorization center for a voice approval. In ecommerce there is no phone step, so code 01 effectively behaves as a decline that requires the cardholder to contact their bank.

Should you retry?

One retry after the cardholder has spoken to their bank is reasonable and often succeeds. Blind automated retries rarely convert and count against Visa's 15-attempts-in-30-days cap per card, so schedule at most one or two spaced attempts.

Why code 01 happens

The issuer's fraud model flagged the transaction as unusual enough to require human review rather than an automatic approval.
The account has a temporary hold or note on it that blocks automated authorizations until the cardholder verifies activity.
The card was recently reissued or the account changed status, and the issuer wants confirmation before approving new charges.
The purchase amount or merchant category is outside the cardholder's normal spending pattern.

What to do about it

Ask the customer to call the phone number on the back of their card and authorize the purchase, then attempt the payment again.
Offer an alternative payment method immediately so you do not lose the sale while the customer sorts things out with their bank.
Log the decline with a timestamp so you can correlate it if the customer reports that their bank shows no record of a block.
Do not repeatedly hammer the same card, because a string of 01 responses in a short window makes the issuer's risk model more suspicious, not less.

Frequently asked questions

What does decline code 01 mean on an online order?: The issuing bank declined the automatic authorization and wants manual verification. Online, the practical fix is for the cardholder to call their bank, confirm the purchase is legitimate, and then try again.
Is code 01 the customer's fault or mine as the merchant?: Usually neither. The issuer's risk system chose to require a referral. It can be triggered by the cardholder's spending pattern or by your merchant category, so check whether 01 declines cluster around specific issuing banks.
Can I retry a transaction that got code 01?: Yes, but only after the customer contacts their bank. Retrying immediately with no change almost always returns the same code and burns one of your allowed retry attempts under card network rules.

Related decline codes