Skip to main content

Authorization Windows Reference

Prerequisites

Before using this reference, understand:

TL;DR
  • Visa CNP: 7 days standard, 5 days merchant-initiated, 30 days extended
  • Mastercard: 7 days final auth, 30 days preauth
  • Amex: 7 days standard, 30 days max clearing delay
  • Capture after expiry = chargeback risk - issuer can dispute late presentment

Authorization validity windows determine how long you have to capture after obtaining approval. Miss the window, and you'll need to re-authorize (which might fail).


Visa Authorization Windows

Card-Not-Present (Online, Phone Orders)

TypeWindowNotes
Standard transactions7 calendar daysMost e-commerce
Merchant-initiated transactions5 daysChanged April 2024
Extended authorization indicator30 calendar daysSpecific MCCs only

Card-Present (In-Store, Terminal)

NetworkWindow
Visa5 days
Mastercard, Amex, Discover2 days

Extended Windows (Special Categories)

These merchant categories qualify for 30-day windows:

  • Lodging (hotels, motels)
  • Cruise lines
  • Vehicle rentals

Requires specific transaction indicators in the authorization request.


Mastercard Authorization Windows

Final Authorizations

RegionWindow
General7 calendar days
India domestic4 calendar days
Europe (Maestro non-ATM)7 calendar days

Preauthorizations

30 calendar days when flagged as preauthorization in the message.

Important Distinction

Mastercard differentiates between a "preauthorization" (flagged as such) and a regular "final authorization." The preauth gets a longer window. Make sure your processor is sending the correct indicator.

Other Windows

Transaction TypeWindow
Offline chip-approved7 calendar days from transaction date
Refund transactions5 calendar days

American Express Authorization Windows

TypeWindow
Standard transactions7 days
Lodging, cruise lines, vehicle rentalsExtended (varies by category)
Maximum clearing delay30 days from transaction date

PayPal Authorization Windows

TypeWindow
Authorization valid29 days
"Honor period" (most likely to succeed)3 days
Capture limit115% of original auth or $75 over (whichever is less)

After 3 days, you may need to "reauthorize" for best success rates.


Chargeback Protection Periods

Understanding these windows is critical for chargeback defense.

Mastercard Chargeback Protection

Authorization TypeProtection Period
Preauthorizations30 calendar days
Final authorizations7 calendar days (4 days India domestic)
Undefined authorizations7 calendar days

"Statused" accounts: If the issuer flags an account negatively (closed, fraud investigation, severely delinquent, lost/stolen) and you captured after the protection period expired, the issuer can charge back the transaction.

Critical Rule

If you captured within the protection period, you're generally safe even if the account gets statused afterward. If you captured late, you're exposed to reason code disputes.

Visa Late Presentment

Visa Dispute Condition 11.3 covers:

  • Valid authorization required but not obtained
  • Valid authorization obtained but transaction not processed within required timeframe

This has a 75-day dispute window from transaction processing date.

Amex Authorization Disputes

American Express allows chargebacks when:

  • Authorization was declined, reversed, or partially reversed but merchant submitted anyway
  • Initial authorization is more than 7 days before clearing date (unless qualified for estimated charges)
  • Merchant failed to follow authorization requirements

What Happens If You Miss the Window

  1. The hold on customer's funds releases
  2. You cannot capture against that authorization
  3. You must request a new authorization
  4. New auth might be declined (insufficient funds, card lost, etc.)
  5. If you capture anyway against expired auth, you're exposed to chargebacks

Quick Reference Table

NetworkTransaction TypeWindow
VisaCNP (standard)7 days
VisaCNP (merchant-initiated)5 days
VisaCNP (extended indicator)30 days
VisaCard-present5 days
MastercardFinal authorization7 days
MastercardPreauthorization30 days
MastercardOffline chip-approved7 days
MastercardIndia domestic4 days
AmexStandard7 days
AmexLodging/rental/cruiseExtended
AmexMaximum clearing delay30 days
PayPalStandard29 days
PayPalHonor period3 days

Next Steps

Checking auth windows?

  1. Use quick reference table - All networks at a glance
  2. Check Visa specifics - 7 days CNP, 30 days extended
  3. Check Mastercard specifics - 7 days final, 30 days preauth

Avoiding late capture issues?

  1. Know what happens if you miss - Re-auth required
  2. Understand chargeback exposure - Late = liability
  3. Track auth dates - Capture within window

Qualifying for extended windows?

  1. Check extended categories - Hotels, rentals, cruise
  2. Use correct indicators - Must flag in request
  3. Verify preauth flags - Preauth vs final

See Also