Does code 65 mean the customer is out of money?

No. It concerns transaction count or authentication, not funds. Either the card exceeded how many transactions it may make in a period, or, on Visa, the issuer wants the transaction resubmitted with 3D Secure authentication.

How should I handle a Visa soft decline code 65?

Resubmit through 3D Secure. Visa uses 65 to demand authentication, and the authenticated retry typically approves while also shifting fraud liability to the issuer. Only if the 3DS retry fails should you treat it as a frequency-limit decline and wait a day.

Decline code · Soft decline

Decline code 65: Activity Limit Exceeded / Authentication Required

Historically this code means the card exceeded its allowed number of transactions in a period, a frequency cap rather than an amount cap. Visa additionally repurposed 65 as the soft-decline signal for authentication required, telling the merchant to resubmit through 3D Secure. Which meaning applies depends on the network and context.

Should you retry?

Retry through 3DS immediately for the authentication-required case, which converts well. For genuine frequency caps, retry after the reset window instead, since attempts inside the window are wasted. Distinguish the two by whether an authenticated resubmission succeeds.

Why code 65 happens

The card hit its issuer-defined count of transactions for the day or period, common on debit and prepaid products.
Visa issuers under strong-authentication regimes returned 65 to demand the transaction come back with 3DS authentication, especially for European cards under PSC2.
Rapid repeat purchases, including your own retry logic, consumed the card's frequency allowance.
A fraudster running many small transactions triggered the velocity cap.

What to do about it

For Visa cards, resubmit the transaction through 3D Secure first; if 65 was an authentication demand, the authenticated retry approves.
If frequency limits are the cause, wait for the period to reset, typically the next day, before retrying.
Audit your own retry and dunning logic, since aggressive same-day reattempts can push cards into their frequency caps and manufacture these declines.
Check whether affected cards are prepaid or debit products with structurally low transaction counts and offer alternatives to those customers.

Frequently asked questions

Does code 65 mean the customer is out of money?: No. It concerns transaction count or authentication, not funds. Either the card exceeded how many transactions it may make in a period, or, on Visa, the issuer wants the transaction resubmitted with 3D Secure authentication.
How should I handle a Visa soft decline code 65?: Resubmit through 3D Secure. Visa uses 65 to demand authentication, and the authenticated retry typically approves while also shifting fraud liability to the issuer. Only if the 3DS retry fails should you treat it as a frequency-limit decline and wait a day.

Related decline codes