Every merchant knows the cost of fraud. Far fewer measure the cost of the opposite problem: legitimate customers, with valid cards and every intention to pay, turned away at the final step. These are false declines, and for most online businesses they quietly erode more revenue than fraud ever will.
The frustrating part is that most of these declines are avoidable. They are not a verdict on the customer. They are a symptom of how the transaction was built, routed and authenticated on its way to the issuer.
A decline is rarely one decision
Between the moment a customer confirms payment and the moment the issuer answers, a transaction passes through several hands: the payment page, the gateway, the acquirer, the card scheme, the issuer’s risk engine. Each one reads the transaction data and forms an opinion. A missing field, an inconsistent format, a poorly matched acquirer or an unnecessary authentication challenge can each tip that opinion towards “no”.
This is why approval rates are not a single lever. They are the compound result of three disciplines: data quality, routing and authentication.
Data quality: give the issuer a reason to say yes
Issuers approve what they can recognise and trust. The richer and cleaner the transaction data, the easier that decision becomes.
In practice, this means submitting complete and correctly formatted fields, using the right transaction indicators for the right context (a stored-credential payment should not look like a first-time purchase), and keeping card details current. Network tokenisation plays a central role here: tokens are maintained by the schemes themselves, so a reissued or expired card no longer breaks the payment relationship, and issuers treat tokenised transactions with greater confidence.
None of this is visible to the customer. All of it is visible to the issuer’s risk engine.
Smart routing: the same transaction, a different outcome
Not every acquirer performs equally for every transaction. Approval behaviour varies by card type, issuing country, currency, sector and even time of day. A transaction declined through one acquiring path may be approved through another, with no change to the customer or the card.
Routing intelligently means directing each transaction to the acquirer most likely to get it approved at the best cost, and having a fallback when a path underperforms or fails. For merchants operating across borders, this is where orchestration earns its keep: one integration, several acquiring routes, and a routing logic that works transaction by transaction rather than betting everything on a single provider.
Authentication: strong where required, invisible where possible
Strong Customer Authentication protects everyone, but a challenge presented at the wrong moment is friction that costs sales. The goal is not less security. It is better-placed security.
Modern authentication makes that possible. Well-implemented 3D Secure passes rich data to the issuer so that low-risk transactions can be authenticated silently, without interrupting the customer. Exemptions exist precisely for this purpose, and using them well is the difference between a checkout that flows and one that leaks. When a challenge is genuinely needed, it should be fast, mobile-friendly and clearly presented, so the customer completes it rather than abandoning.
Approval rates are a practice, not a setting
There is no switch that fixes declines. There is a discipline: measure approval rates by issuer, country and payment method; identify where legitimate transactions fall away; fix the data, reroute the flow, recalibrate the authentication. Then measure again.
Merchants who treat approval optimisation as an ongoing practice recover revenue that was already theirs. The customers were there. The intent was there. The only thing missing was a payment setup built to say yes.
At SysPay, this is the thinking behind our platform: helping merchants approve more transactions, pay less, and stay resilient. If you want to understand where your payment flow is leaving approvals behind, our team is happy to take a look with you.
SysPay is an MFSA-licensed electronic money institution (PCI DSS Level 1) providing payment orchestration and modular payment services to online businesses and accommodation providers across Europe.
