Issuer-bank decline rates (‘Capital One declines 18% of yours’). Leads to recoverable revenue via dunning / token retry.
At a glance
Per-issuer decline rates ranked descending. Surfaces statements like “Capital One declines 18% of your transactions” or “Chase Sapphire BIN 414720 declines 22% on recurring billing”. The diagnostic card ops opens when Decline Rate spikes, tells the team whether a single issuer is responsible (often is) or whether the issue is systemic. Direct lever for recoverable revenue via issuer-aware retry timing, BIN-level rule tuning, and account-update enrolment.
Calculation
Calculated automatically from your CyberSource data. See the At a glance summary above for what the metric tracks and the worked example below for a typical reading.Worked example
A US-based enterprise online travel booking merchant running CyberSource for hotel + flight + car-rental payments. The 30-day window covers 14 Mar 26 to 12 Apr 26. The merchant processes ~55,000 transactions per day with high cross-border share (32% of attempts). The top 8 issuers by attempt volume:
Five things worth noticing for an enterprise travel ops lead:
- Capital One at 18.4% is the #1 outlier and triggers the alert. A 18.4% decline rate on 142k attempts is ~26,200 declined transactions in 30 days. Drilling in: the high
do_not_honorshare (52%) suggests Capital One’s risk model is over-flagging this merchant’s transactions specifically. Common cause for travel merchants: Capital One’s risk model is sensitive to high-AOV cross-border bookings (typical of travel) and conservatively declines unless additional auth signal is present. The fix: enrol the merchant’s recurring repeat-customer book on Capital One’s tokenization (Visa VTS), which signals “trusted relationship” to Capital One’s risk model and typically drops decline rate 5, 8pp. - Barclaycard UK at 22.1% is a different problem. AVS-mismatch is 61% of declines, that’s not Barclays declining; that’s the merchant’s Decision Manager rule auto-declining on AVS-mismatch. Barclaycard UK doesn’t fully participate in AVS in the same way US issuers do, so AVS-mismatch on Barclaycard means almost nothing. Tuning the DM rule to NOT auto-decline AVS-mismatch on UK BINs would recover ~7,200 attempts per period. At typical travel AOV 2.4M of recoverable revenue per period.
- Cross-border decline rates are uniformly higher than domestic. Capital One: 14.1% domestic vs 18.4% blended. Citi: 6.1% domestic vs 8.2% blended. This is normal (issuer risk models are more conservative on cross-border) and not directly fixable on the merchant side. The lever is shifting cross-border AVS rules and pursuing 3DS on cross-border to invoke liability shift.
do_not_honoris the dominant reason on most major US issuers. This is the issuer’s polite “no”, an issuer-side risk decision the merchant can’t change in real-time. Recovery comes via: (a) network tokenization to signal “trusted relationship”; (b) dunning at +24h with a customer-side prompt to update payment method; (c) Account Updater service for stored-card recurring customers. None of these recover mostdo_not_honordeclines instantly.- The merchant’s Decision Manager false-positive cost is hidden in the AVS column. Across the top 8 issuers, AVS-mismatch contributes 4-28% of declines depending on issuer geography. Tuning DM rules to be issuer-country-aware (loose on non-US, tight on US) would recover an estimated 3-5% of total declines, ~16,000 attempts per period at 5.4M recoverable revenue.
do_not_honor declines on top 4 issuers, expect total decline rate to drop ~1.5pp and the composite Payment Health Score to gain ~3 points. The cross-platform impact via Recoverable Revenue is typically $2-5M monthly for an enterprise travel merchant of this scale.
Sibling cards merchants should reference together
Reconciling against the vendor’s own dashboard
Where to look in CyberSource Business Center (EBC2):- Reports → BIN Analysis Report, the canonical issuer-level decline-rate dump. Group by 6-digit BIN.
- Transactions → Search, filter by BIN prefix for ad-hoc per-issuer drilldowns.
- Reports → Issuer Performance Dashboard (where enabled), pre-built issuer-ranking view.
Cross-connector reconciliation:
Known limitations / merchant FAQs
Capital One declines 18% of my transactions. Can I do anything about it? Yes, several things, in order of impact: (1) Tokenization, enrol your repeat-customer book on Visa Token Service (VTS) for Capital One BINs; this signals “established relationship” to Capital One’s risk model and typically drops decline rate 5-8pp. (2) Network token uplift, push Apple Pay / Google Pay flows where the underlying card auths via VTS at provisioning time. (3) Dunning at +24h with customer prompt, recovers ~12% ofdo_not_honor declines. (4) Direct issuer outreach, for very large merchants, CyberSource account-management can sometimes facilitate direct conversations with the issuer’s risk team about specific patterns being over-flagged.
My ops team says “issuer decline” is unfixable. Are they right?
Partly. The merchant cannot directly change an issuer’s auth decision. But the merchant CAN: (a) reduce risk-model triggers by sending richer auth signal (3DS, network tokens, fraud-screening attributes); (b) shift volume away from problem issuers via promotional offers favouring other tender (e.g. promote “5% off with Apple Pay”); (c) recover declined volume via dunning / retry / token refresh. “Unfixable in real-time” doesn’t mean “unrecoverable”.
Why is Barclaycard UK showing 22% decline rate when other UK issuers are normal?
Almost always an AVS-rule misfire. Barclaycard UK doesn’t fully participate in AVS in the way US issuers do; AVS-mismatch on Barclaycard means the data wasn’t there to compare, not that the address was wrong. Decision Manager rules that auto-decline on AVS-mismatch over-block UK issuers. The fix: scope the AVS-decline rule to US/CA/AU issuer countries only. Recovery is typically 10, 15pp on UK-specific decline rate.
One issuer’s decline rate jumped 8pp overnight. Is that an outage?
Probably yes. Issuer outages happen, risk-system updates, batch-clearing failures, network connectivity issues. Visa publishes Operations Bulletins (OPS) for known issuer outages on the Visa Online portal. Cross-reference with Decline Rate Spike Alert timing. If the spike correlates with a Visa OPS bulletin, no merchant-side action needed (resolves typically within 4-24 hours). If not, escalate to CyberSource account-management for issuer-side investigation.
Should I stop accepting cards from a specific issuer that declines too much?
Almost never. Even a 25% decline-rate issuer is still authorising 75% of attempts; refusing the issuer entirely costs you the 75% to save the 25%. Better strategies: tighten DM rules for that issuer’s BIN range, push customers from that issuer toward saved-token / Apple Pay / Google Pay flows, or accept the issuer with reduced retry attempts so you don’t waste retry quota on a low-recovery issuer.
My recurring book has different issuer decline patterns than my one-time book. Why?
Yes, materially different. Issuers’ risk models flag recurring transactions more aggressively (legitimate concern about card-on-file fraud). Some issuers are particularly conservative on recurring. Capital One, Citi, and several smaller mid-tier US issuers. The fix is the same as for one-time: tokenization signals “trusted relationship” and substantially reduces issuer-side conservatism.
How does Account Updater service interact with this card?
Account Updater is a card-network service (Visa Account Updater, Mastercard Automatic Billing Updater) that automatically refreshes stored cards when the underlying card is reissued, replaced, or upgraded. For merchants with significant tokenized recurring books, Account Updater enrolment recovers most expired_card declines without customer touch. It doesn’t help with do_not_honor (issuer-side risk) but does help with invalid_account (231) and expired_card declines.
Why is my biggest issuer (highest volume) usually NOT the highest decline rate?
Because the biggest issuers (Chase, Amex, Citi) have the most sophisticated risk models AND the most robust AVS / 3DS / fraud-screening infrastructure. Their decline rates are typically lowest. The high-decline-rate issuers tend to be mid-tier US banks, smaller foreign issuers, or BINs heavily issued to higher-risk customer segments (subprime card products, prepaid programmes). This is why the alert volume floor is important, without it, the card surfaces noise from low-volume problem BINs that don’t warrant ops attention.
Does this card include corporate vs consumer card breakdown?
The drilldown supports it. Corporate / commercial card BINs typically run higher decline rates than consumer BINs because corporate cards have stricter spending controls (per-transaction limits, MCC restrictions). For B2B merchants with heavy corporate-card volume, this is a real lever, corporate-card decline rates 8-15% are normal, consumer 3-6% are normal. See Corporate vs Consumer Cards.
My multi-currency global merchant, does this card aggregate across currencies?
Yes, the issuer ranking is currency-neutral (count-based). A French issuer’s decline rate is the same regardless of whether the customer paid in EUR, USD, or GBP, the ranking shows the issuer’s global behaviour against this merchant’s traffic.