What does invalid card number mean if the customer says the card works elsewhere?

The number that reached the issuer is not the number on the card. Either it was mistyped at checkout or corrupted in transit or storage. Have the customer re-enter it, and if it was a saved card, inspect the stored value on your side.

Why am I seeing hundreds of code 14 declines suddenly?

That pattern is almost certainly a card-testing attack using generated numbers. Add rate limiting, CAPTCHA, and BIN velocity rules immediately, because sustained testing traffic damages your standing with your acquirer.

Decline code · Hard decline

Decline code 14: Invalid Card Number

The card number does not correspond to a valid account. It may fail checksum validation, belong to no issued card, or reference an account number the issuer does not recognize. Whatever was typed or transmitted, no real card sits behind it.

Should you retry?

Never retry the same number; it will never become valid. A corrected number entered by the customer is a new transaction and fine to submit right away. Visa treats 14 as Category 1, so automated reattempts of the identical PAN violate reattempt rules.

Why code 14 happens

The customer mistyped a digit, and the number either fails the Luhn check or lands on an unissued account.
A stored card token or PAN was corrupted or truncated somewhere in your storage or transmission chain.
A card tester is submitting generated numbers to find live ones, producing bursts of 14 responses.
The BIN is real but the specific account number was never issued or has been purged from the issuer's records.

What to do about it

Ask the customer to carefully re-enter the full card number; a single transposed digit is the most common cause.
Validate the Luhn checksum client-side before submission so obvious typos never reach authorization.
If the failure involves a stored card, inspect your vault entry for truncation or encoding corruption rather than blaming the customer.
Monitor for velocity patterns: many 14 responses from one session, IP, or device is card-number enumeration and should trigger blocking.

Frequently asked questions

What does invalid card number mean if the customer says the card works elsewhere?: The number that reached the issuer is not the number on the card. Either it was mistyped at checkout or corrupted in transit or storage. Have the customer re-enter it, and if it was a saved card, inspect the stored value on your side.
Why am I seeing hundreds of code 14 declines suddenly?: That pattern is almost certainly a card-testing attack using generated numbers. Add rate limiting, CAPTCHA, and BIN velocity rules immediately, because sustained testing traffic damages your standing with your acquirer.

Related decline codes