What does pick up card mean for an online purchase?

The issuer has revoked the card, usually for loss, theft, or fraud, and is instructing any terminal to confiscate it. Online, it simply means the card is permanently blocked and the customer must use a different one.

Should I ban a customer whose card returns code 04?

Not automatically, since a legitimate customer may not know their card was compromised and replaced. But review the session for fraud signals, and treat repeated 04 responses from one account or IP as card testing.

Decline code · Hard decline

Decline code 04: Pick Up Card

The issuer wants the physical card confiscated. The account is blocked, typically because the card was reported lost or stolen, closed for fraud, or otherwise revoked. In ecommerce there is nothing to pick up, so treat it as a permanent decline on that card number.

Should you retry?

Never retry. Code 04 is a Visa Category 1 response, meaning the issuer will never approve this card, and reattempting it violates network reattempt rules and exposes you to excessive-retry fees and fraud liability.

Why code 04 happens

The cardholder reported the card lost or stolen and the issuer killed the credentials.
The issuer closed the account for fraud, abuse, or serious delinquency and flagged the card for capture.
A reissued card replaced this one and the old number was placed in capture status.
The card number is circulating in a compromised-card database and the issuer preemptively blocked it.

What to do about it

Cancel the order or request a different payment method; this card number is dead.
Flag the customer account for review, because a capture-status card used on your site can indicate stolen card testing.
Check the session for other fraud markers such as mismatched AVS, proxy IPs, or rapid-fire attempts across multiple cards.
Never store or re-attempt this PAN in your billing retry logic; suppress it from any card updater or dunning cycle.

Frequently asked questions

What does pick up card mean for an online purchase?: The issuer has revoked the card, usually for loss, theft, or fraud, and is instructing any terminal to confiscate it. Online, it simply means the card is permanently blocked and the customer must use a different one.
Should I ban a customer whose card returns code 04?: Not automatically, since a legitimate customer may not know their card was compromised and replaced. But review the session for fraud signals, and treat repeated 04 responses from one account or IP as card testing.

Related decline codes