Authorization Rate

Authorization rate measures one stage of payment conversion, not completed sales or revenue. An issuer decline may reflect an invalid or risky payment, while a retry may eventually approve the same order. Define the population, period, first-attempt versus all-attempt treatment, and issuer or PSP reporting boundary before comparing rates.

What Drives Authorization Rate

Declines fall into two categories: soft declines (retriable) and hard declines (terminal).

Soft declines may be temporary or require a changed payment/authentication path; the applicable network and provider rules govern whether and when to retry:

• Insufficient funds (the cardholder may need a different payment method)
• Do not honour (generic issuer rejection; cause and retry eligibility are not disclosed by the code alone)
• Velocity limit exceeded (card used too frequently in a short window)
• Card not enrolled for 3DS (contact issuer)

Hard declines signal permanent rejection:

• Card reported lost or stolen
• Account closed
• Invalid card number
• Fraud suspected (card network or issuer block)

Compare Like with Like

Segment by card-present versus online, geography, card type, issuer, authentication path and first attempts versus retries. A single cross-industry percentage cannot serve as a reliable benchmark for every merchant. Report both issuer authorization performance and end-to-end order conversion when optimizing a checkout.

How Merchants Improve Authorization Rates

Network tokenization — replacing PAN with a network token (Visa VTS, Mastercard MDES) measurably improves card-not-present authorisation rates versus raw PAN, though the lift is segment-, issuer- and market-dependent, and scheme-published figures vary by channel and period. Issuers trust tokenized credentials more than raw PANs because tokens are cryptographically bound to the merchant.

3DS2 frictionless flow — properly authenticated transactions shift liability to the issuer and often receive preferential treatment in the issuer's authorization model.

Account updater — can refresh eligible expired or reissued stored card credentials, depending on network and provider coverage.

Retry logic — follow provider/network advice for the specific decline and cap retries. Do not turn a generic decline code into a universal delay or repeated blind attempts.

PSP routing — different acquirers have different issuer relationships and BIN routing logic. Multi-acquirer strategies can route specific card ranges to the acquirer with the highest historical approval rate for that BIN.

Authorization Rate vs. Approval Rate

These terms are sometimes used interchangeably but are technically distinct:

• Issuer authorization rate = issuer-approved requests / authorization requests sent to issuers. State whether it counts first attempts only or all requests, including retries.
• Merchant attempt or checkout approval rate = approved orders / attempts started at a merchant-defined point; this may include pre-network fraud blocks and other failures.
• Approval rate is used inconsistently across dashboards. Inspect the provider's numerator and denominator rather than assuming it means either of the above.

Always confirm which definition your PSP or acquirer is reporting before benchmarking.