Authorization Windows Reference
Before using this reference, understand:
- Authorization and capture basics
- Decline codes for failed captures
- Chargeback lifecycle for dispute timing
- Visa CNP: 7 days standard, 5 days merchant-initiated, 30 days extended
- Mastercard: 7 days final auth, 30 days preauth
- Amex: 7 days standard, 30 days max clearing delay
- Capture after expiry = chargeback risk - issuer can dispute late presentment
Authorization validity windows determine how long you have to capture after obtaining approval. Miss the window, and you'll need to re-authorize (which might fail).
Visa Authorization Windows
Card-Not-Present (Online, Phone Orders)
| Type | Window | Notes |
|---|---|---|
| Standard transactions | 7 calendar days | Most e-commerce |
| Merchant-initiated transactions | 5 days | Changed April 2024 |
| Extended authorization indicator | 30 calendar days | Specific MCCs only |
Card-Present (In-Store, Terminal)
| Network | Window |
|---|---|
| Visa | 5 days |
| Mastercard, Amex, Discover | 2 days |
Extended Windows (Special Categories)
These merchant categories qualify for 30-day windows:
- Lodging (hotels, motels)
- Cruise lines
- Vehicle rentals
Requires specific transaction indicators in the authorization request.
Mastercard Authorization Windows
Final Authorizations
| Region | Window |
|---|---|
| General | 7 calendar days |
| India domestic | 4 calendar days |
| Europe (Maestro non-ATM) | 7 calendar days |
Preauthorizations
30 calendar days when flagged as preauthorization in the message.
Mastercard differentiates between a "preauthorization" (flagged as such) and a regular "final authorization." The preauth gets a longer window. Make sure your processor is sending the correct indicator.
Other Windows
| Transaction Type | Window |
|---|---|
| Offline chip-approved | 7 calendar days from transaction date |
| Refund transactions | 5 calendar days |
American Express Authorization Windows
| Type | Window |
|---|---|
| Standard transactions | 7 days |
| Lodging, cruise lines, vehicle rentals | Extended (varies by category) |
| Maximum clearing delay | 30 days from transaction date |
PayPal Authorization Windows
| Type | Window |
|---|---|
| Authorization valid | 29 days |
| "Honor period" (most likely to succeed) | 3 days |
| Capture limit | 115% of original auth or $75 over (whichever is less) |
After 3 days, you may need to "reauthorize" for best success rates.
Chargeback Protection Periods
Understanding these windows is critical for chargeback defense.
Mastercard Chargeback Protection
| Authorization Type | Protection Period |
|---|---|
| Preauthorizations | 30 calendar days |
| Final authorizations | 7 calendar days (4 days India domestic) |
| Undefined authorizations | 7 calendar days |
"Statused" accounts: If the issuer flags an account negatively (closed, fraud investigation, severely delinquent, lost/stolen) and you captured after the protection period expired, the issuer can charge back the transaction.
If you captured within the protection period, you're generally safe even if the account gets statused afterward. If you captured late, you're exposed to reason code disputes.
Visa Late Presentment
Visa Dispute Condition 11.3 covers:
- Valid authorization required but not obtained
- Valid authorization obtained but transaction not processed within required timeframe
This has a 75-day dispute window from transaction processing date.
Amex Authorization Disputes
American Express allows chargebacks when:
- Authorization was declined, reversed, or partially reversed but merchant submitted anyway
- Initial authorization is more than 7 days before clearing date (unless qualified for estimated charges)
- Merchant failed to follow authorization requirements
What Happens If You Miss the Window
- The hold on customer's funds releases
- You cannot capture against that authorization
- You must request a new authorization
- New auth might be declined (insufficient funds, card lost, etc.)
- If you capture anyway against expired auth, you're exposed to chargebacks
Quick Reference Table
| Network | Transaction Type | Window |
|---|---|---|
| Visa | CNP (standard) | 7 days |
| Visa | CNP (merchant-initiated) | 5 days |
| Visa | CNP (extended indicator) | 30 days |
| Visa | Card-present | 5 days |
| Mastercard | Final authorization | 7 days |
| Mastercard | Preauthorization | 30 days |
| Mastercard | Offline chip-approved | 7 days |
| Mastercard | India domestic | 4 days |
| Amex | Standard | 7 days |
| Amex | Lodging/rental/cruise | Extended |
| Amex | Maximum clearing delay | 30 days |
| PayPal | Standard | 29 days |
| PayPal | Honor period | 3 days |
Next Steps
Checking auth windows?
- Use quick reference table - All networks at a glance
- Check Visa specifics - 7 days CNP, 30 days extended
- Check Mastercard specifics - 7 days final, 30 days preauth
Avoiding late capture issues?
- Know what happens if you miss - Re-auth required
- Understand chargeback exposure - Late = liability
- Track auth dates - Capture within window
Qualifying for extended windows?
- Check extended categories - Hotels, rentals, cruise
- Use correct indicators - Must flag in request
- Verify preauth flags - Preauth vs final
See Also
- Authorization and Capture - Core concepts
- Capture Operations - Holds, voids, partial captures
- Decline Codes - When captures fail
- Chargeback Reason Codes - Dispute categories