# Getting More Payments Approved (Auth Optimization)
Source: https://paymentsandrisk.com/docs/payments/auth-optimization

Last updated 23 October 2026.

TL;DR

-   **Baseline first**: Compare approval rates by channel, issuer and country. Know yours before optimizing; see [Benchmarks](https://paymentsandrisk.com/docs/reference/benchmarks/#authorization-rate-benchmarks) for published context
-   **Network tokens**: Replace stored card numbers; compare approvals with raw PANs on matched payments. See [published Visa context](https://paymentsandrisk.com/docs/payments/reference/tokenization/#real-world-data)
-   **Retry logic**: Read the decline and advice codes before another attempt. Stolen-card responses mean stop; an expired card needs corrected details or another card
-   **[3DS](https://paymentsandrisk.com/docs/fraud/prevention/3ds/) exemptions**: Request TRA, low-value, recurring exemptions where you qualify
-   **Flag correctly**: MIT vs. CIT matters. Wrong flags = higher declines

Customers being declined right now?

If customers are actively telling you their cards won't go through, don't start here - start with the [Fix Declining Auth Rates playbook](https://paymentsandrisk.com/docs/playbooks/fix-declining-auth-rates/), an hour-by-hour diagnostic for a sudden decline spike. If the problem is customers abandoning checkout (not card declines), see [Checkout Conversion](https://paymentsandrisk.com/docs/payments/checkout-conversion/). Come back to this page for the longer-term optimization work.

If only subscription renewals are failing, use [failed-renewal recovery setup](https://paymentsandrisk.com/docs/payments/subscriptions-recurring/#set-up-recovery-before-you-buy-another-tool); for an account-wide spike, use [Fix Declining Auth Rates](https://paymentsandrisk.com/docs/playbooks/fix-declining-auth-rates/).

Match the effort to your size

**Under $100K/month?** Check your auth rate in your processor dashboard against your own baseline. If it drops, or customers complain, run the [Fix Declining Auth Rates playbook](https://paymentsandrisk.com/docs/playbooks/fix-declining-auth-rates/) to find out why. Start with that before the heavier optimizations below.

**$100K-$500K/month?** Start with retry logic and 3DS exemptions. Network tokens are worth a look.

**Over $500K/month?** All of it applies. Recovered payments are real revenue; measure what gets captured.

Your auth rate is the share of attempted card payments that the customer's bank approves, and auth optimization is the work of pushing that share up. More approvals can mean more money. Check what gets captured, at what value and cost.

## Popular in This Section

-   **[Fix Declining Auth Rates Playbook](https://paymentsandrisk.com/docs/playbooks/fix-declining-auth-rates/)** - Emergency diagnostic when declines suddenly spike
-   **[Optimization Tactics](https://paymentsandrisk.com/docs/payments/auth-optimization/tactics/)** - Network tokens, retry logic, 3DS exemptions, and transaction flags
-   **[Increase Auth Rates Playbook](https://paymentsandrisk.com/docs/playbooks/increase-auth-rates/)** - Step-by-step guide to improving approval rates
-   **[Decline Codes Reference](https://paymentsandrisk.com/docs/reference/decline-codes/)** - Understanding why transactions fail and what to do

* * *

Most SMBs don't know theirs, and when you ask, they guess high.

Compare your own segments. A drop in approvals is money you're not collecting. [Benchmarks](https://paymentsandrisk.com/docs/reference/benchmarks/#authorization-rate-benchmarks) has published context, with its scope.

```mermaid
flowchart TD
    A[Transaction<br/>Submitted] --> B{Decline?}
    B -->|Approved| C[Revenue<br/>Captured]
    B -->|Declined| D{Decline<br/>Type?}
    D -->|Hard| E[Do Not Retry<br/>Lost Card, Fraud]
    D -->|Soft| F{Retry<br/>Strategy}
    F -->|Eligible under response<br/>and advice codes| G[Retry at provider-approved time]
    G --> B

    subgraph LEVERS["Optimization Levers"]
        L1[Network Tokens<br/>Compare approvals]
        L2[3DS Exemptions<br/>Measure friction]
        L3[Smart Retry<br/>Track recovery]
        L4[Correct Flags<br/>MIT vs CIT]
    end

    style C fill:#1f6f4a,color:#fff
    style E fill:#b42318,color:#fff
    style L1 fill:#3d5a80,color:#fff
    style L2 fill:#3d5a80,color:#fff
    style L3 fill:#3d5a80,color:#fff
    style L4 fill:#3d5a80,color:#fff
```

## What Matters

1.  **Know your auth rate.** Can't fix what you don't measure.
2.  **Test network tokens against raw PANs.** [Visa publishes a comparison](https://paymentsandrisk.com/docs/payments/reference/tokenization/#real-world-data). Measure yours by issuer and transaction type.
3.  **Retry logic matters.** Wrong retries burn issuer trust. Right retries recover revenue.
4.  **3DS is a lever, not just compliance.** Used well it improves auth. Used badly it kills conversion.
5.  **Issuer declines have patterns.** Learn your top decline reasons and fix the fixable ones.

* * *

## Auth Optimization Topics

[🔧 Optimization Tactics Network tokens, retry logic, 3DS optimization, transaction flags](https://paymentsandrisk.com/docs/payments/auth-optimization/tactics)

[📈 Increase Auth Rates Playbook Step-by-step guide to improving approval rates](https://paymentsandrisk.com/docs/playbooks/increase-auth-rates)

* * *

## Know Your Auth Rate

Baseline before you touch anything.

### How to Calculate

```text
Auth Rate = Approved Transactions / Total Attempted Transactions × 100
```

### What's Normal

| Segment | What to Compare |
| --- | --- |
| E-commerce (US domestic) | Your baseline by issuer, device and card brand |
| Subscription (initial) | First-payment approvals, separately from renewals |
| Subscription (recurring) | Renewals and retries by billing cycle |
| Card-present (CP) | Chip, tap and keyed entry separately |
| International CNP | Country and issuer within the same channel |

There's no universal channel target in the public sources checked for [Benchmarks](https://paymentsandrisk.com/docs/reference/benchmarks/#authorization-rate-benchmarks). Investigate drops from your own baseline; ask your processor for comparable merchants.

### Where to Find It

Check your processor dashboard. Look for:

-   "Authorization rate" or "Approval rate"
-   Filter by: card brand, card type, geography, transaction type

Ask Your Dev

"Where can I see our overall auth rate? Can I filter by card brand and geography?"

* * *

## Quick Reference: Decline Types

| Type | Examples | Action |
| --- | --- | --- |
| **Soft decline** | Insufficient funds (51), Issuer unavailable (91) | Check the specific response and advice; 51 may need customer action, while 91 may be temporary |
| **Hard decline** | Lost card (41), Stolen (43), Expired (54) | Stop on lost/stolen responses; get updated expiry details or another card for 54 |
| **Ambiguous** | Do not honor (05) | Follow network and processor advice; don't retry a stop instruction. Ask the customer to contact their issuer or use another card |

How to handle each one's in [optimization tactics](https://paymentsandrisk.com/docs/payments/auth-optimization/tactics/#hard-vs-soft-decline-logic).

* * *

## Scale Callout

| Volume | Focus |
| --- | --- |
| **Under $100k/mo** | Know your auth rate. Ensure basic retry logic is sane. Enable 3DS for high-risk only. |
| **$100k-$1M/mo** | Monthly decline code analysis. 3DS exemption strategy. Network token migration. |
| **Over $1M/mo** | Issuer-level optimization. Dedicated auth rate monitoring. A/B test 3DS strategies. Multiple processor routing for auth lift. |

* * *

## Where This Breaks

1.  **International transactions.** Cross-border declines are structurally higher. Local acquiring helps, but it's more moving parts.

2.  **High-risk MCCs.** Some industries have elevated decline rates regardless of optimization. Issuers are more conservative.

3.  **New merchants without history.** Issuers trust a track record. Until you've got one, you'll see higher declines.


* * *

## Analyst Layer: Metrics to Track

| Metric | What It Tells You | Target |
| --- | --- | --- |
| **Overall auth rate** | Baseline health | Compare matched segments with your own baseline |
| **Auth rate by card brand** | Network-specific issues | Compare each brand with its own matched issuer and customer baseline |
| **Auth rate by geography** | Cross-border friction | Compare countries within the same channel, route and customer mix |
| **Soft vs. hard decline ratio** | Retry opportunity | Classify your decline codes; compare the mix over time |
| **Retry success rate** | Retry logic effectiveness | Compare recovered payments on matched retry-eligible segments |
| **3DS challenge rate** | Friction level | Compare by issuer, country and device |
| **3DS conversion rate** | Challenge completion | Compare completed challenges on matched segments |

### Trend Over Snapshot

Auth rate fluctuates. Track weekly trend, not daily snapshot.

Compare weekly trends on matched segments. Set alerts from your own transaction counts and normal variation; a small daily sample can swing sharply.

* * *

## Next Steps

**Just starting auth optimization?**

1.  Pull your current auth rate from your processor dashboard → Baseline before optimizing
2.  Identify your top 5 decline codes → Focus fixes on highest-impact issues
3.  Check if you're using network tokens → If not, migrate stored cards to tokens

**Ready to improve?**

1.  Review [optimization tactics](https://paymentsandrisk.com/docs/payments/auth-optimization/tactics/) → Network tokens, retry logic, 3DS
2.  [Follow the increase auth rates playbook](https://paymentsandrisk.com/docs/playbooks/increase-auth-rates/) → Step-by-step optimization
3.  Implement smart retry logic → Recover soft declines without burning issuer trust

**Already optimizing?**

1.  Set up weekly auth rate monitoring → Track trends, not snapshots
2.  Segment by card brand and geography → Find specific weak spots
3.  Consider multi-processor routing → Route to best-performing processor by issuer

* * *

## See Also

-   [Fix Declining Auth Rates](https://paymentsandrisk.com/docs/playbooks/fix-declining-auth-rates/) - Emergency diagnostic for sudden decline spikes
-   [Optimization Tactics](https://paymentsandrisk.com/docs/payments/auth-optimization/tactics/) - Detailed optimization techniques
-   [3DS Deep Dive](https://paymentsandrisk.com/docs/fraud/prevention/3ds/) - Authentication optimization
-   [Increase Auth Rates Playbook](https://paymentsandrisk.com/docs/playbooks/increase-auth-rates/) - Step-by-step guide
-   [Subscriptions and Recurring](https://paymentsandrisk.com/docs/payments/subscriptions-recurring/) - Recurring billing
-   [Checkout Conversion](https://paymentsandrisk.com/docs/payments/checkout-conversion/) - Reducing abandonment
-   [Decline Codes Reference](https://paymentsandrisk.com/docs/reference/decline-codes/) - Understanding failures
-   [Payments Metrics](https://paymentsandrisk.com/docs/payments/metrics/) - Performance tracking