Code 43: Stolen Card

Decline Code 43: What 'Stolen Card' Means & What Merchants Must Do

Decline code 43 means the card being presented has been reported stolen. The issuing bank has flagged the card and is instructing the merchant to retain it if possible. It is a hard decline and the most serious of the card status decline codes. How a merchant handles the next few moments matters both for fraud prevention and for their own safety.

What Does Decline Code 43 Mean?

Code 43 is a "pick up card — stolen" response from the issuing bank. The cardholder has already contacted their bank to report the card stolen, and the bank has flagged the card number across the network. When that card is presented anywhere, the network returns a 43 to alert the merchant.

Unlike code 41, where a lost card situation may be innocent, a code 43 implies the cardholder knows the card is in someone else's hands and has specifically reported it as taken. The person presenting the card at your terminal is, by definition, not the authorized cardholder.

That said, the merchant's job is not to apprehend anyone. It is to decline the transaction, retain the card if it's safe to do so, and handle the situation calmly without escalation.

What Merchants Are Required to Do for a Code 43 Decline

1. If it is safe to do so, retain the card. Take it calmly and without confrontation. "I need to hold onto this card" is sufficient. No explanation required, no accusation necessary.
2. Do not accuse or confront the person presenting the card. Your terminal told you the card was stolen. It did not tell you who is standing in front of you or what they know. Accusations based on a decline code alone can escalate a manageable situation into an unsafe one.
3. If you feel unsafe or the person becomes aggressive, do not attempt to seize the card. Your safety is the priority. Let the card go. No card is worth a physical confrontation. Step back, let the person leave, and document what you observed.
4. Call the number provided by your processor or on the terminal to report the retained card. There is a protocol for this. Follow it.
5. Note a description of the person if law enforcement may be involved. If you do retain the card or if the situation warrants a police report, a calm, factual description of the individual documented immediately after the interaction is useful.
6. For online or card-not-present transactions: decline, cancel any associated order, and document the transaction details. There is no card to retain and no in-person interaction to manage.

Decline Code 43 vs. Decline Code 41

Both are hard declines in the "pick up card" category, but they carry different implications.

Code 41 means the card was reported lost. The owner misplaced it and may not know who has it. The situation may be entirely innocent — someone may have found the card and is trying to use it without realizing it's been reported.

Code 43 means the card was reported stolen. The owner knows it was taken. Active fraud is more likely. Card seizure is more commonly required, and the fraud liability for a merchant who processes after seeing a 43 is higher.

The merchant response is similar in both cases — calm, professional, no accusations — but a code 43 warrants a higher level of alertness.

Merchant Liability for Processing After a Code 43

Processing any transaction after receiving a code 43 decline without voice authorization exposes the merchant to full chargeback liability. The network flagged the card as stolen. The merchant processed it anyway. There is no dispute to be had: the liability sits entirely with the merchant.

Voice authorization is a limited override mechanism, not a general workaround for stolen card declines. Contact your processor before attempting any override on a code 43. When uncertain, the answer is always to decline and not process.

Frequently Asked Questions About Decline Code 43

Do I have to seize the card when I see code 43? It depends on your processor's requirements and your terminal instructions. Many processors require card retention on a 43 decline. All of them require that you do not process the transaction. If your instructions require retention and it is safe to do so, retain the card. If it is not safe, do not put yourself at risk. Document what you can and contact your processor.

What if the person presenting the card becomes threatening? Do not attempt to retain the card. Your safety comes before fraud prevention procedures. Step back, let the person leave, and call the police. Document the interaction as accurately as you can immediately afterward: physical description, direction of travel, any vehicle information. No protocol requires you to put yourself in a dangerous situation.

Should I call the police when I see code 43? It depends on the situation. If you retained the card, your processor will guide you through the reporting process which may involve law enforcement. If the person left before you could retain the card, filing a police report is reasonable especially if you believe fraud is actively being attempted. If the transaction was card-not-present, there is no immediate situation to respond to, though documenting and reporting to your processor is still appropriate.

Can an online merchant receive a code 43 decline? Yes. A stolen card flagged in the network will return a 43 regardless of whether the transaction is in-person or card-not-present. For online merchants the response is simpler: decline the transaction, cancel any associated order before fulfillment, and document the attempt. There is no card to retain and no in-person situation to manage, but the order should not be fulfilled under any circumstances.

Related Decline Codes

Code 43 sits at the most serious end of the card status decline codes. These related codes cover the surrounding landscape:

• Code 41 — Lost Card. The closest relative to a 43. Card reported lost rather than stolen. Lower urgency, same general response protocol.
• Code 59 — Suspected Fraud. The bank flagged the transaction for suspected fraud without a stolen card report. Does not carry the same card seizure implications.
• Code 05 — Do Not Honor. The catch-all decline. Less specific than a 43, no card seizure involved.
• Code 51 — Insufficient Funds. A soft decline with no fraud implication.
• Code 62 — Restricted Card. Card-level restrictions on an otherwise valid card.
• Code 54 — Expired Card. Expiration issue, no fraud implication.
• Code 78 — Blocked First Use. Unactivated card, no fraud implication.
• Code 14 — Invalid Card Number. The card number doesn't match any active account.