Stripe incorrect_cvc — recovery guide

incorrect_cvc means the CVC (the 3-digit code on the back of most cards, or 4-digit on Amex) that was saved alongside the card number does not match what the issuing bank expects. The bank refuses the charge on the assumption that whoever provided the CVC doesn't physically have the card — which is exactly what the CVC is supposed to prove.

Because the CVC is stored with the saved payment method, retrying the charge uses the same wrong CVC and fails the same way. The customer has to re-collect their card.

• Typo at signup — customer typed the wrong CVC 6 months ago, first charge went through (banks sometimes allow this once), later charge got caught.
• Card was reissued with same number, new CVC — this is rare but happens on stolen-card replacements.
• Wrong card on file — customer typed CVC from one card, number from another.
• Bank tightened verification — some banks dynamically enable CVC checking for high-risk sessions.

1. Email within 1 hour — the customer usually remembers adding the card and can fix it quickly.
2. Use a friendly tone — this is a typo, not a dispute. Keep it light.
3. Billing Portal link is the whole fix — they re-enter card details, CVC gets overwritten, problem solved.
4. Don't auto-retry — disable Stripe Smart Retries for incorrect_cvc, it just wastes attempts.
5. Second email at +48h, SMS at +4d if no response.

Hi [name], it looks like there might be a typo with your saved card — the security code didn't match when we tried to charge. Takes 20 seconds to fix: click below, re-enter your card, done.

[Update payment method →]

Notice the framing: "might be a typo" rather than "your CVC is wrong." Softer phrasing, faster response rate.