Card AuthorizationAuthorization

Card authorization — the payment authorization step in every card transaction where the issuing bank approves or declines the charge based on available funds, fraud controls, and account status. Credit card authorization happens in milliseconds and reserves the funds — but the money doesn’t actually move until settlement, typically 1–2 business days later. The Federal Reserve’s payment systems data documents the scale at which these decisions occur across the U.S. card network.

Before a payment actually moves, the card network asks the customer’s bank a simple question: “Is this card valid, and are there funds available?” The answer — approve or decline — happens in milliseconds. That response is the approval. The money hasn’t moved yet; it’s just been reserved against the cardholder’s available balance or credit limit.

From the merchant’s perspective, a card authorization code means you’re cleared to complete the transaction. But it is not the same as payment. The funds are held, not transferred. Settlement — when the money actually moves into your merchant account — comes later when you close your batch. A transaction that was authorized can still result in a chargeback after settlement if the cardholder disputes it. The CFPB’s guidance on credit card billing outlines the consumer rights that underpin the dispute and reversal process.

The flow moves through several institutions in under two seconds:

Each step adds a layer of fraud screening — all completing before the terminal displays “Approved.” The processor checks for basic validity, the card network checks against known fraud patterns, and the issuing bank checks the cardholder’s account status and available balance.

• Standard approval — a real-time approval for the exact transaction amount. Most retail and restaurant transactions work this way.
• Pre-authorization (pre-auth) — a hold placed for an estimated amount before the final total is known. Hotels, gas stations, and car rentals use pre-auths routinely. The final settlement amount may differ from the authorized amount.
• Incremental approval — an additional hold added on top of an existing one. Used when a hotel stay extends or a car rental goes over the original period.
• Offline approval — an approval granted by the terminal without real-time network contact, used in low-connectivity environments. Carries higher risk for the merchant.

Declined transactions are one of the most common sources of lost revenue for merchants. A declined card that could have been recovered with a retry or a different card represents a lost sale. Understanding decline codes helps identify patterns: are declines coming from insufficient funds, expired cards, or fraud flags? Each has a different fix.

Pre-auth holds create cash flow timing issues. If a hold isn’t captured and settled within the card network’s window — typically 7 days for Visa, 30 days for some commercial cards — it expires and the merchant must re-initiate or loses the transaction. See our guide on how chargebacks work for what happens after settlement if a cardholder disputes a charge.

Expand your understanding with these related payment processing concepts:

Authorization Failures and Soft Declines Both Cost Revenue. The Pattern Is Diagnosable.

Send us your last processing statement. We will separate authorization failures from true declines, identify any processor-side soft-decline patterns affecting your approval rate, and show you what a fair effective rate looks like at your volume.

No obligation • For glossary readers comparing pricing models and processor options • Response within one business day