Authorisation
Authorisation is the process by which the issuer approves or declines a card payment — based on account balance, credit limit, and security rules.
Authorisation
Authorisation is the first step in the card payment process. When a cardholder initiates a payment, the payment gateway sends an authorisation request via the acquirer and the card network to the issuer.
The issuer checks whether the card is valid, whether there are sufficient funds or a credit limit, and whether security rules (e.g. 3D Secure, country locks) are met. Within a few seconds, the Comerciante receives a response: approved or declined.
Important: Authorisation is not yet a payment. The amount is merely reserved in the cardholder's account. The actual charge only occurs during the so-called capture, which can take place separately or simultaneously with the authorisation. This distinction is particularly relevant for hotels, car rentals, and advance payments, where the final amount is not yet known at the time of authorisation.
Authorisation examples
A customer pays online with Mastercard. The issuer authorises the payment in under 2 seconds.
A hotel authorises EUR 500 on the guest's credit card at check-in. The final amount is only collected at check-out (capture).
An authorisation is declined because the cardholder's credit limit has been exceeded.
Authorisation FAQ
What does authorisation mean in a card payment?
Authorisation is the approval of a card payment by the issuer. The amount is reserved but not yet debited. The actual charge only occurs upon capture.
How long does an authorisation take?
An authorisation usually takes 1–3 seconds. With additional 3D Secure authentication, the overall process can take slightly longer, as the cardholder must confirm the payment.
What is the difference between authorisation and capture?
The authorisation reserves the amount on the card account. The capture actually charges the account. Both can occur simultaneously or at different times.
Why is an authorisation declined?
Common reasons: insufficient funds or credit limit, expired card, security block by the issuer (e.g. country lock), failed 3D Secure authentication, or suspected fraud.
