Stripe decline code
invalid_cvcThe CVC provided is not formatted correctly (wrong length or contains non-digits).
Type
Recoverable
Frequency
Uncommoninvalid_cvc means the CVC itself is malformed, not just incorrect. Visa and Mastercard use 3-digit CVCs; American Express uses 4. If the wrong length was submitted, you get this code. Recovery requires the customer to re-enter their card.
Do not retry. Request new card details.
Direct the customer to a payment update page and note that most CVCs are 3 digits (or 4 for Amex).
Permanent issue. The card cannot be charged. Customer must provide a new payment method.
Yes. American Express uses a 4-digit CID code on the front of the card. Visa, Mastercard, and Discover use 3-digit CVCs on the back.
How Rebounce handles invalid_cvc
Rebounce classifies every failed payment by its Stripe decline code and applies the optimal recovery strategy automatically. For invalid_cvc, that means a limited retry window combined with customer outreach. Multi-channel follow-up through email, SMS, WhatsApp, and in-app banners ensures the customer actually sees the message.