How to Calculate Authorization Rate

How to Calculate Authorization Rate

Payment authorization rate is one of the most important performance metrics in card payments. It shows what percentage of submitted authorization attempts receive an approved response.

The basic formula is:

Authorization rate = Approved authorization attempts ÷ Eligible submitted authorization attempts × 100

For example, suppose a merchant submits 10,000 eligible card authorization attempts and 9,100 are approved:

9,100 ÷ 10,000 × 100 = 91%

The merchant’s authorization rate is 91%.

The arithmetic is simple. The difficult part is defining what counts as:

•An authorization attempt

•An approval

•An eligible transaction

•A decline

•A technical failure

•A retry

•A successful order

Two merchants can process the same payment outcomes and report different authorization rates because they use different denominators. Even teams inside the same company can produce conflicting numbers if one includes gateway errors while another counts only issuer decisions.

A useful authorization rate therefore requires more than a formula. It requires a documented measurement policy.

What is payment authorization?

Payment authorization is the stage at which a card transaction is submitted for approval.

In a typical card payment:

•The customer submits payment credentials.

•The merchant sends a payment request through its gateway, processor, or acquirer.

•The request travels through the relevant card network.

•The issuer evaluates the transaction.

•An approval, decline, or other response returns through the payment chain.

•The merchant decides what to show the customer and whether to create or fulfill the order.

An approval indicates that the requested operation was authorized at that point in time. It does not necessarily mean the merchant has received settlement funds, successfully captured the transaction, or completed the order.

Authorization should therefore be distinguished from:

•Authentication: Verifying that the payer is likely to be the legitimate cardholder

•Capture: Confirming that an approved authorization should proceed toward clearing and settlement

•Settlement: Movement of funds through the payment system

•Order conversion: The customer completing a confirmed purchase

•Payment success: A broader business term whose definition may include authorization, capture, and order confirmation

EMV 3-D Secure, for example, supports authentication by exchanging transaction, payment-method, and device information between merchants and issuers. A customer can authenticate successfully and still receive an authorization decline. Conversely, authentication can fail before a valid authorization decision occurs. (EMVCo)

The standard authorization-rate formula

The most common attempt-level calculation is:

Authorization rate =

Approved authorization attempts

÷

Eligible submitted authorization attempts

× 100

The corresponding decline rate is often calculated as:

Decline rate =

Declined authorization attempts

÷

Eligible submitted authorization attempts

× 100

These two rates add to 100% only when the denominator contains exclusively final approval and decline decisions.

For example:

Authorization outcome

Attempts

Approved

9,100

Declined

700

Timed out

100

Technical error

50

Pending or unresolved

50

Total submitted attempts

10,000

There are at least two defensible ways to calculate performance.

Authorization decision rate

This view includes only completed authorization decisions:

9,100 ÷ (9,100 + 700) × 100 = 92.86%

It answers:

Of the attempts that received a final approval or decline decision, what percentage were approved?

End-to-end submitted-attempt success rate

This view includes all eligible submitted attempts:

9,100 ÷ 10,000 × 100 = 91%

It answers:

Of all attempts submitted into the payment process, what percentage produced an approval?

Neither view is inherently wrong. They measure different parts of the system.

The first is useful for analyzing issuer and network authorization decisions. The second is more useful for understanding the customer’s complete payment experience because timeouts and technical errors also prevent purchases.

The safest reporting practice is to publish both and label them clearly.

What should count in the numerator?

The numerator should usually contain authorization attempts that received a final approved response under the merchant’s defined scope.

A simple numerator is:

Approved authorization attempts

However, several edge cases require an explicit policy.

Full approvals

A normal approval for the requested amount belongs in the numerator.

Mastercard’s public network-response documentation identifies response code 00 as an approved or successfully completed result. It also warns that actual response descriptions may vary and recommends that implementations not rely solely on human-readable descriptions. (Mastercard Developers)

Partial approvals

A partial approval occurs when the issuer approves less than the full requested amount.

Whether it belongs in the numerator depends on the business and transaction type.

Possible treatments include:

•Count it as approved because authorization was granted.

•Count it separately because the full order amount was not approved.

•Count it as successful only when the customer completes the remaining balance through another payment method.

•Exclude it from a conventional ecommerce metric if partial authorization is unsupported.

For transparency, report partial approvals separately rather than silently combining them with full approvals.

Approved authorizations later reversed

A reversal does not erase the fact that the original attempt was approved.

For an authorization-decision metric, the approval normally remains in the numerator. For a final payment-success or captured-revenue metric, the reversed transaction may no longer qualify.

This is one reason authorization rate should not be presented as equivalent to revenue conversion.

Approved authorizations that are never captured

An approved authorization that is not captured still counts as an approval for the authorization-rate calculation.

It may indicate a separate problem:

•The customer abandoned after authorization.

•Inventory became unavailable.

•The merchant’s order system failed.

•Fraud review stopped fulfillment.

•The authorization expired before capture.

•The merchant intentionally canceled the order.

Track authorization-to-capture rate separately.

Zero-value or account-verification authorizations

Zero-value authorizations and account-verification requests may be used to check credentials without charging a purchase amount.

These should ordinarily be excluded from the merchant’s purchase-authorization rate and tracked in a separate credential-validation metric. Combining them with purchase authorizations can distort performance because they have a different purpose and risk profile.

What should count in the denominator?

The denominator should represent the population of attempts the metric is intended to evaluate.

For a general purchase-authorization rate, that usually means eligible card purchase authorization requests submitted during a defined period.

A strong denominator policy specifies:

•Included transaction types

•Included payment channels

•Included markets and currencies

•Included payment methods

•Included final and nonfinal response states

•Treatment of retries

•Treatment of technical failures

•Treatment of merchant-risk rejections

•Treatment of test traffic

•Treatment of account verifications

•Time zone and reporting period

Without those definitions, two authorization-rate reports cannot be compared reliably.

Which payment outcomes should be included?

The following framework provides a practical starting point.

Outcome

Include in issuer-decision rate?

Include in end-to-end attempt rate?

Recommended treatment

Approved

Yes

Yes

Numerator and denominator

Issuer decline

Yes

Yes

Denominator

Network decline

Usually

Yes

Categorize by decision source

Acquirer decline

Depends on scope

Yes

Track separately

Merchant-risk rejection before submission

No

Usually no

Separate risk-acceptance metric

Merchant-risk rejection after authorization submission

Depends

Yes

Preserve decision sequence

Authentication failure

No

Usually yes

Separate authentication category

Customer abandons authentication

No

Usually no authorization attempt exists

Separate abandonment metric

Validation failure before submission

No

No

Separate checkout/integration metric

Gateway or processor technical error

No

Usually yes

Separate technical-failure category

Timeout

No final decision

Usually yes

Reconcile before final classification

Pending or unknown

Not until resolved

Usually yes provisionally

Keep unresolved until reconciled

Duplicate blocked before submission

No

Usually no

Separate duplicate-protection metric

Test transaction

No

No

Exclude

Zero-value verification

Separate population

Separate population

Report independently

Refund

No effect on original authorization

No effect on original authorization

Track post-payment

Chargeback

No effect on original authorization

No effect on original authorization

Track risk and disputes

Mastercard Gateway distinguishes approved responses from issuer declines, timeouts, expired cards, insufficient-funds outcomes, acquirer system errors, unsupported transactions, authentication failures, customer cancellations, submitted requests, and other states. That illustrates why merchants should not force every unsuccessful result into one generic decline category. (Mastercard Developers)

A complete worked example

Consider a hypothetical ecommerce merchant with the following monthly card activity:

Outcome

Attempts

Fully approved

82,500

Partially approved

100

Issuer declined

8,000

Merchant-risk declined before network submission

2,000

Authentication failed

1,500

Customer abandoned authentication

1,000

Gateway technical error after payment submission

500

Validation failed before authorization submission

250

Timed out or unresolved

150

Zero-value card verification

1,000

Test traffic

50

The merchant must first define its population.

Issuer-decision authorization rate

Suppose the company includes full approvals, partial approvals, and issuer declines, but excludes all attempts that never received an issuer decision.

Approved decisions = 82,500 + 100 = 82,600

Completed issuer decisions = 82,600 + 8,000 = 90,600

Authorization rate =

82,600 ÷ 90,600 × 100

= 91.17%

Full-approval-only rate

If partial approvals do not produce usable ecommerce orders, the merchant may report:

82,500 ÷ 90,600 × 100 = 91.06%

End-to-end payment-submission approval rate

Suppose the merchant wants to evaluate every genuine purchase payment submitted beyond client-side validation.

It includes:

•Full and partial approvals

•Issuer declines

•Authentication failures

•Gateway errors

•Timeouts

It excludes:

•Pre-submission risk rejections

•Authentication abandonment before payment submission

•Client-side validation failures

•Zero-value verifications

•Test traffic

Eligible submitted attempts =

82,600 + 8,000 + 1,500 + 500 + 150

= 92,750

End-to-end approval rate =

82,600 ÷ 92,750 × 100

= 89.06%

The business now has two meaningful metrics:

•Issuer-decision authorization rate: 91.17%

•End-to-end submitted-attempt approval rate: 89.06%

The 2.11-percentage-point difference is operationally useful. It represents payment attempts lost outside completed issuer decisions, primarily through authentication and technical problems.

Attempt-level rate versus order-level success

Attempt-level authorization rate is not the same as the percentage of orders that eventually get paid.

Imagine one customer makes three attempts:

•First card attempt is declined.

•The same card is retried and declined.

•A digital wallet succeeds.

At the attempt level:

•One approval

•Two declines

•Authorization rate: 33.3%

At the order level:

•One checkout attempted payment

•One order eventually paid

•Eventual payment-success rate: 100%

Both calculations are correct, but they answer different questions.

Merchants should report at least three related measures.

First-attempt authorization rate

Approved first authorization attempts

÷

All eligible first authorization attempts

× 100

This is often the clearest measure of the initial customer experience.

All-attempt authorization rate

All approved attempts

÷

All eligible attempts, including retries

× 100

This is useful for processor operations and response-code analysis, but it can be depressed by repeated attempts on the same order.

Eventual order-level payment success

Orders eventually approved

÷

Unique orders that attempted payment

× 100

This captures successful recovery through corrected details, later retries, another card, or another payment method.

A mature payment dashboard should show all three.

Why retries can distort authorization rate

Retries increase the denominator. They can therefore make attempt-level authorization rate fall even when recovery improves final revenue.

Consider 1,000 orders:

•850 succeed on the first attempt.

•150 are initially declined.

•60 of those declined orders succeed on a second attempt.

The first-attempt authorization rate is:

850 ÷ 1,000 = 85%

The all-attempt authorization rate is:

910 approvals ÷ 1,150 total attempts = 79.13%

The eventual order-level payment-success rate is:

910 ÷ 1,000 = 91%

The retry strategy recovered 60 orders and increased eventual order success from 85% to 91%. Yet the all-attempt authorization rate is only 79.13%.

This is not a contradiction. It is a denominator effect.

The merchant should also calculate:

Decline recovery rate =

Initially declined orders later completed

÷

Initially declined orders

× 100

In this example:

60 ÷ 150 × 100 = 40%

Retry guidance must follow current rules

Merchants should not infer retryability from broad labels such as “soft decline” alone.

Visa has organized authorization responses into categories intended to guide whether and how transactions may be resubmitted. Its published rule update also demonstrates that permissible handling varies by response category and may include limits on reattempts. Merchants should obtain current requirements from their acquirer or payment provider before automating retries. (Visa)

Network rules, response mappings, and retry limits can change. A strategy that was compliant in one region, network, or year may not be appropriate elsewhere.

How to calculate authorization rate for recurring payments

Subscription and recurring-payment performance should normally be separated from customer-present checkout transactions.

Recurring payments introduce conditions such as:

•Expired or replaced credentials

•Insufficient funds at renewal time

•Stored-credential requirements

•Customer-initiated versus merchant-initiated classification

•Account-updater results

•Network-token lifecycle events

•Multiple scheduled recovery attempts

•Canceled subscriptions

•Delinquent accounts

•Different billing intervals

Recommended subscription metrics include:

Initial subscription authorization rate

Approved first subscription sign-up authorizations

÷

Eligible first subscription authorization attempts

Renewal authorization rate

Approved first renewal attempts

÷

Eligible first renewal attempts

Renewal recovery rate

Failed renewals later recovered

÷

Initially failed renewal orders

Eventual renewal success

Renewals eventually paid

÷

Eligible renewals due

Do not combine initial subscription sign-ups and automatic renewals without segmentation. They differ in customer presence, credential age, transaction indicators, and recovery possibilities.

How to calculate authorization rate across multiple acquirers

Merchants using more than one acquirer or route should calculate authorization rate by route and in aggregate.

For each route:

Route authorization rate =

Approved eligible attempts on the route

÷

Total eligible attempts sent to the route

However, simple route comparisons can be misleading.

One acquirer may receive:

•Lower-risk domestic traffic

•Returning customers

•Common currencies

•Lower order values

Another may receive:

•Cross-border traffic

•New customers

•Higher-risk markets

•High-value orders

•Transactions already rejected by another route

The second acquirer may have a lower raw authorization rate even if it performs better for the traffic it receives.

Compare routes using similar transaction cohorts, such as:

Card-issuing country

× Currency

× Card type

× Customer status

× Authentication status

× Transaction type

× Order-value band

When routing retries from one acquirer to another, distinguish:

•First-route performance

•Second-route recovery

•Unique order success

•Duplicate attempts

•Network-rule compliance

•Incremental approval achieved after rerouting

How payment authentication affects authorization-rate reporting

Authentication occurs before or alongside authorization in many ecommerce transactions, but it should not be silently merged into the authorization metric.

EMVCo distinguishes frictionless authentication from challenge flows in which the customer must complete an additional issuer-selected step. It has also published guidance intended to reduce failures in browser-based out-of-band authentication, including flows involving banking applications. (EMVCo)

Track the authentication funnel separately:

Authentication requested

Authentication completed frictionlessly

Challenge presented

Challenge completed

Challenge abandoned

Authentication failed

Authorization submitted

Authorization approved

Authorization declined

Relevant metrics include:

Authentication completion rate

Completed authentications

÷

Authentication attempts started

Post-authentication authorization rate

Approved authorizations after successful authentication

÷

Eligible authorizations submitted after successful authentication

Challenge abandonment rate

Challenges started but not completed

÷

Challenges presented

A low overall payment-success rate may be caused by challenge abandonment even when issuer authorization performance is strong.

How merchant fraud screening affects the rate

Some merchants screen transactions before submitting them for network authorization.

If merchant-risk blocks are excluded from the authorization-rate denominator, the reported rate may improve because higher-risk traffic never reaches the issuer.

That does not necessarily mean the business is accepting more legitimate revenue.

Measure a separate risk-funnel sequence:

Payment attempts submitted by customers

↓

Merchant-risk accepted

↓

Submitted for issuer authorization

↓

Issuer approved

↓

Captured

↓

Fulfilled without fraud loss

Useful metrics include:

Merchant-risk acceptance rate

Attempts allowed past merchant risk

÷

Eligible attempts evaluated by merchant risk

Issuer authorization rate after merchant screening

Issuer-approved attempts

÷

Attempts submitted to issuer authorization

End-to-end good-order rate

Fulfilled legitimate orders

÷

Eligible customer payment attempts

An aggressive fraud system can produce an attractive downstream authorization rate by rejecting difficult traffic upstream. Payments and fraud teams should therefore review authorization, fraud loss, chargebacks, false-positive indicators, and net approved revenue together.

Mastercard describes transaction history, location, device information, and user-behavior patterns as examples of information that can support real-time fraud evaluation and help reduce false positives. (Mastercard)

The most common card-decline reasons

Decline labels vary across issuers, networks, acquirers, processors, gateways, regions, and transaction types. A merchant should preserve the raw response and map it into an internal category rather than assume that a short description is universally standardized.

Mastercard’s public documentation explicitly warns that actual response descriptions may differ and recommends against coding solely to the displayed descriptions. (Mastercard Developers)

A practical merchant taxonomy follows.

Insufficient funds or available credit

The customer may not have enough available funds or credit for the requested amount.

Merchant use: Analyze by order-value band, billing timing, market, debit versus credit, and recurring-payment schedule. For recurring transactions, a compliant delayed retry may sometimes be appropriate, subject to provider and network guidance.

Generic or unspecified issuer decline

A generic response may provide limited actionable detail.

Merchant use: Segment by issuer, card range, country, acquirer, authentication status, and transaction type. A large concentration in one corridor may indicate routing, data-quality, risk, or issuer-specific performance issues.

Do not tell customers the exact issuer reason when the merchant does not know it.

Expired card

The credential’s expiration date has passed or is treated as invalid.

Merchant use: Improve card-entry validation, stored-credential lifecycle handling, account-updater processes, and customer prompts. Separate new-entry errors from recurring credentials that became stale.

Invalid card number, account, or payment data

The transaction may contain an invalid card number, expiration date, security code, amount, address, token, or required field.

Merchant use: Review form validation, tokenization, field mapping, country formats, amount formatting, and API payload construction. These failures are often more controllable than issuer-risk declines.

Transaction not permitted

The card, customer account, merchant, terminal, country, currency, or transaction type may not support the attempted operation.

Merchant use: Check card-product support, recurring-payment configuration, merchant-category restrictions, international-use settings, currency support, and acquiring coverage.

Suspected fraud or security restriction

The issuer or a merchant-side risk system may consider the transaction too risky.

Merchant use: Determine who made the decision. Compare new and returning customers, authenticated and unauthenticated payments, card and device geography, risk rules, and later chargeback outcomes.

Restricted, lost, stolen, or closed card

The card or account may be unusable for security or lifecycle reasons.

Merchant use: Do not encourage repeated use of the same credential. Offer another payment method and follow current processor and network guidance.

Authentication failure

The payer could not be authenticated, the challenge failed, or required authentication information was missing.

Merchant use: Treat this as an authentication problem rather than a conventional issuer authorization decline. Review challenge flows, mobile handoffs, timeout behavior, and transmission of authentication results.

Issuer or authorization system unavailable

The issuer, network, processor, or another system may be temporarily unavailable.

Merchant use: Preserve the exact status, avoid presenting an uncertain result as a final decline, reconcile the transaction, and apply only permitted retry behavior.

Unable to route

The transaction could not reach the intended destination.

Merchant use: Investigate processor connectivity, card-range coverage, acquirer availability, network configuration, and fallback routing.

Duplicate transaction

The system may detect an attempt with the same or similar transaction information.

Merchant use: Review idempotency, double-click prevention, browser refreshes, webhook handling, retry logic, and order references.

How merchants should segment authorization rate

A blended company-wide authorization rate is useful for executive monitoring but insufficient for diagnosis.

At minimum, segment by:

•Issuing country

•Customer country

•Acquirer and processing route

•Card network

•Credit, debit, prepaid, or commercial card

•Domestic versus cross-border

•Presentment currency

•Transaction type

•One-time versus recurring

•Customer-initiated versus merchant-initiated

•New versus returning customer

•Authenticated versus non-authenticated

•Frictionless versus challenged authentication

•Device and browser

•Order-value band

•Product category

•Merchant account or MID

•First attempt versus retry

•Raw and normalized response category

A useful diagnostic table might look like this:

Segment

Attempts

Approved

Authorization rate

Share of declines

Domestic debit

40,000

38,000

95.0%

20.2%

Domestic credit

25,000

23,250

93.0%

17.7%

Cross-border credit

20,000

16,400

82.0%

36.4%

Subscription renewals

15,000

12,450

83.0%

25.8%

The table shows where declines occur, but it does not yet prove why.

The next step is to split the weakest segment by issuer country, route, currency, response category, authentication status, and customer type.

How to compare authorization rates fairly

There is no universal “good” authorization rate that applies to every merchant.

Performance varies with:

•Industry and merchant category

•Domestic and international mix

•Debit and credit mix

•New and returning customers

•One-time and recurring payments

•Average order value

•Issuer distribution

•Currency

•Customer authentication

•Fraud policy

•Acquirer and route

•Reporting methodology

A merchant with mostly returning domestic customers cannot be compared directly with a digital-goods business serving first-time cross-border buyers.

Before comparing rates, confirm that both populations use the same:

•Numerator

•Denominator

•Reporting period

•Transaction types

•Retry treatment

•Technical-error treatment

•Authentication treatment

•Market and card mix

•Order-value range

Internal cohort comparisons are generally more actionable than broad industry averages.

Merchant guidance: building an authorization dashboard

A useful dashboard should include more than one percentage.

Executive view

•First-attempt authorization rate

•Eventual order-level payment success

•Approved transaction value

•Decline value

•Decline recovery

•Authorization-to-capture rate

•Approval rate by major market

•Fraud and chargeback indicators

Payment-operations view

•Authorization rate by acquirer and route

•Response-code category

•Issuer and card range

•Domestic versus cross-border

•Retry performance

•Timeouts and unresolved attempts

•Partial approvals

•Network-token versus primary-account-number performance

•Authentication outcome

Product and ecommerce view

•Payment-step reach

•Payment submission rate

•First-attempt approval

•Error-message recovery

•Alternative-method recovery

•Checkout completion

•Challenge abandonment

•Approvals without confirmed orders

Finance view

•Approved amount

•Captured amount

•Settled amount

•Reversed amount

•Refunded amount

•Authorization expiration

•Approval-to-capture leakage

•Revenue recovered after initial decline

Fraud view

•Merchant-risk rejection rate

•Issuer fraud declines

•False-positive indicators

•Manual-review outcomes

•Approval rate after step-up authentication

•Fraud loss by approved cohort

•Chargeback rate

•Net legitimate revenue

Developer guidance: implementing the metric correctly

Developers should design the data model before building the dashboard.

Use stable identifiers

Store separate identifiers for:

customer_id

cart_id

checkout_id

order_id

payment_attempt_id

authentication_id

provider_transaction_id

authorization_id

capture_id

Do not use one identifier for every stage.

Record every state transition

A useful event sequence is:

payment_attempt_created

payment_details_validated

risk_evaluation_completed

authentication_started

authentication_completed

authorization_submitted

authorization_approved

authorization_declined

authorization_timed_out

authorization_pending

authorization_reconciled

capture_submitted

capture_completed

order_confirmed

Preserve raw and normalized fields

Store both:

•Raw provider response code

•Raw provider message

•Normalized internal category

•Decision source

•Finality

•Retry eligibility under current policy

•Customer-facing action

•Merchant action

Do not discard the raw data after normalization.

Reconcile nonfinal states

A timeout or unknown response should not automatically become a decline.

The system should:

•Preserve the original attempt ID.

•Query or receive the final status.

•Update the attempt without creating a second logical payment.

•Prevent accidental duplicate charges.

•Recalculate finalized reporting when the result resolves.

Define attribution for routed attempts

When an order uses multiple routes, record:

•Original route

•Original response

•Retry route

•Retry reason

•Final route

•Final outcome

•Whether recovery was incremental

•Number of attempts attached to the order

Protect payment data

Analytics systems should use tokenized or internal identifiers rather than sensitive card data. PCI DSS provides baseline technical and operational requirements for entities that store, process, or transmit cardholder data or sensitive authentication data, including merchants and service providers. (PCI Security Standards Council)

Never send full card numbers, security codes, PIN data, or other sensitive authentication data to general analytics, logging, or session-replay platforms.

How to improve authorization rate without gaming the metric

A merchant can make authorization rate appear higher by blocking difficult transactions before submission. That does not necessarily improve the business.

The goal should be:

Increase approved legitimate revenue while controlling fraud, operational cost, customer friction, and network compliance.

Practical opportunities include:

Improve payment-data quality

Validate required fields, transaction indicators, amounts, currencies, billing formats, stored-credential treatment, and authentication data.

Diagnose route-level problems

Compare like-for-like cohorts across acquirers and merchant accounts. Investigate sudden performance changes by market, issuer, and card range.

Improve authentication completion

Reduce broken challenges, failed app handoffs, unclear instructions, and unnecessary customer steps.

Tune merchant fraud controls

Review rules that reject disproportionate numbers of legitimate-looking customers, particularly international, high-value, or first-time buyers.

Localize acceptance

Use suitable acquiring routes, currencies, checkout experiences, and payment methods for each market when operationally appropriate.

Recover eligible declines carefully

Use response-specific, network-compliant recovery logic rather than repeatedly resubmitting unchanged transactions.

Maintain stored credentials

For recurring payments, reduce failures caused by expired or replaced credentials through appropriate credential-lifecycle processes.

Offer another way to pay

A declined card does not have to become a lost order. Relevant wallets, bank-based methods, local payment options, or another card can recover the purchase.

Frequently asked questions

What is the formula for payment authorization rate?

The standard formula is:

Approved authorization attempts

÷

Eligible submitted authorization attempts

× 100

The merchant should document whether the denominator includes technical failures, timeouts, authentication failures, partial approvals, and retries.

Is authorization rate the same as payment success rate?

No. Authorization rate measures approved authorization attempts. Payment success may refer to an end-to-end outcome that includes authentication, authorization, capture, and confirmed order creation.

A payment can be authorized but never captured. A declined first attempt can also be followed by a successful second method.

Should technical errors be included in authorization rate?

They should normally be excluded from an issuer-decision authorization rate because no issuer approval or decline was completed.

They may be included in an end-to-end submitted-attempt success rate because they still represent failed customer payment attempts. Report the two measures separately.

Should retries count as new authorization attempts?

Yes, for an attempt-level authorization rate, each genuine authorization submission is normally a separate attempt.

Also calculate first-attempt authorization rate and eventual order-level payment success so repeated retries do not obscure the customer and revenue outcomes.

Do merchant fraud declines belong in the denominator?

Merchant-risk rejections that occur before network submission generally do not belong in an issuer authorization-rate denominator.

They should be measured in a separate merchant-risk acceptance rate. For an end-to-end customer payment metric, they may be included as unsuccessful payment outcomes.

How are partial approvals treated?

Treatment depends on the merchant’s business model.

A partial approval may count as an authorization approval, but it should usually be reported separately from full approvals. If the remaining balance is never collected, the order may still fail commercially.

What is a good authorization rate?

There is no universally valid benchmark.

Rates differ by country, card type, transaction type, industry, customer mix, currency, authentication, risk policy, and calculation methodology. Compare consistent internal cohorts and like-for-like external benchmarks.

Why did authorization rate fall while revenue increased?

Retries or alternative-route recovery may have increased both the number of attempts and the number of successful orders.

Attempt-level authorization rate can fall while eventual order-level payment success and revenue rise. Review first-attempt approval, all-attempt approval, recovery rate, and order-level success together.

How often should authorization rate be monitored?

High-volume merchants should monitor it continuously or daily, with alerts for material deviations by route, country, issuer, currency, and response category.

Strategic trend reviews may be weekly or monthly, but technical and route-specific deterioration can require immediate attention.

Authorization rate is useful only when its definition is clear

Calculating authorization rate is easy:

Approved attempts ÷ eligible submitted attempts × 100

Using it well requires greater discipline.

Merchants must decide:

•Which attempts are eligible

•Which approvals count

•How nonfinal states are treated

•Whether technical errors are included

•How retries are measured

•How risk and authentication are separated

•Whether the analysis is attempt-level or order-level

•How the metric connects to capture, fraud, and revenue

The most useful payment program does not chase one blended percentage. It combines first-attempt approval, completed issuer decisions, technical performance, authentication completion, decline recovery, and eventual order success.

To improve authorization performance, start by making the metric trustworthy—then use it to identify where legitimate payments are being lost.

Search intent, ranking-page gaps, and editorial angle

The dominant search intent is practical: readers want the authorization-rate formula, a worked example, guidance on what belongs in the numerator and denominator, and an explanation of how to interpret the result.

Most ranking pages provide the basic formula but leave important questions unresolved:

•Whether technical errors, authentication failures, merchant-risk blocks, and zero-value account checks belong in the denominator

•How retries can distort attempt-level authorization rates

•The difference between first-attempt authorization rate and eventual order success

•How to calculate rates for recurring payments, partial approvals, and multi-acquirer routing

•Why decline codes are not fully standardized across providers

•How merchants should turn decline data into operational decisions

•How finance, payments, risk, product, and engineering teams should use different views of the same metric

The editorial angle below treats authorization rate as a measurement system, not merely a percentage. It gives merchants a defensible formula, a calculation policy, implementation guidance, diagnostic segments, and a framework for connecting authorization performance to revenue.

No original draft was included with this request, so the article has been built as a fresh, fully optimized version.

SEO deliverables

Five SEO title options

•How to Calculate Payment Authorization Rate

•Authorization Rate Formula for Card Payments

•How Payment Authorization Rate Is Calculated

•Calculate Card Authorization Rate Accurately

•Payment Authorization Rate: Formula and Guide

Five meta-description options

•Learn how to calculate payment authorization rate, define the right denominator, analyze declines, handle retries, and improve card acceptance.

•Calculate card authorization rate accurately with formulas, examples, decline categories, retry guidance, segmentation, and merchant reporting tips.

•Understand the payment authorization-rate formula, what to include, how retries affect results, and how merchants can diagnose lost approvals.

•A merchant-focused guide to calculating authorization rate across card attempts, retries, recurring payments, acquirers, and international markets.

•Discover how authorization rate is calculated, why teams report different results, and how to turn approval and decline data into business action.

Recommended URL slug

/how-to-calculate-authorization-rate/

how to calculate authorization rate

Secondary keywords

•calculate authorization rate

•payment authorization rate

•card authorization rate

•authorization rate formula

•payment approval rate calculation

•credit card authorization rate

•issuer approval rate

•transaction approval rate

•card decline rate

•first-attempt authorization rate

•payment acceptance rate

•payment success rate

•authorization rate versus conversion rate

•improve payment authorization rate

Relevant semantic entities and related terms

•Issuing bank

•Acquiring bank

•Acquirer

•Card network

•Payment gateway

•Payment processor

•Authorization request

•Authorization response

•Approval code

•Decline code

•Network response code

•Merchant advice code

•EMV 3-D Secure

•Strong Customer Authentication

•Authentication

•Capture

•Settlement

•Reversal

•Partial approval

•Soft decline

•Hard decline

•Stored credential

•Customer-initiated transaction

•Merchant-initiated transaction

•Network token

•Account updater

•Merchant risk

•False decline

•Retry strategy

•Local acquiring

•Payment routing

•Cross-border payment

•PCI DSS

Suggested H1

How to Calculate Authorization Rate: Formula, Examples, and Merchant Guidance

Proposed heading hierarchy

H1: How to Calculate Authorization Rate

H2: What Is Payment Authorization?

H2: The Standard Authorization-Rate Formula

H2: What Should Count in the Numerator?

H3: Full Approvals

H3: Partial Approvals

H3: Reversals and Uncaptured Authorizations

H3: Zero-Value Verifications

H2: What Should Count in the Denominator?

H2: Which Payment Outcomes Should Be Included?

H2: A Complete Worked Example

H2: Attempt-Level Rate Versus Order-Level Success

H2: Why Retries Can Distort Authorization Rate

H2: How to Calculate Authorization Rate for Recurring Payments

H2: How to Calculate Authorization Rate Across Multiple Acquirers

H2: How Authentication Affects Authorization Reporting

H2: How Merchant Fraud Screening Affects the Rate

H2: The Most Common Card-Decline Reasons

H3: Insufficient Funds

H3: Generic Issuer Declines

H3: Expired or Invalid Credentials

H3: Transaction Not Permitted

H3: Fraud or Security Restrictions

H3: Authentication Failure

H3: System Unavailability

H3: Duplicate Transactions

H2: How Merchants Should Segment Authorization Rate

H2: How to Compare Authorization Rates Fairly

H2: Merchant Guidance: Building an Authorization Dashboard

H2: Developer Guidance: Implementing the Metric

H2: How to Improve Authorization Rate

H2: Frequently Asked Questions

H2: Authorization Rate Is Useful Only When Its Definition Is Clear

Three possible featured-snippet answers

Featured snippet option 1: formula

Payment authorization rate is calculated by dividing approved authorization attempts by eligible submitted authorization attempts and multiplying by 100. For example, 9,100 approvals from 10,000 eligible attempts produce a 91% authorization rate.

Featured snippet option 2: definition

Authorization rate is the percentage of card authorization attempts that receive an approved response. Merchants should define whether the denominator includes technical errors, timeouts, authentication failures, partial approvals, and retries.

Featured snippet option 3: difference from payment success

Authorization rate measures approved payment attempts, while payment-success rate may measure whether an order is eventually paid and completed. A declined first attempt can later succeed, and an approved authorization may never be captured.

Suggested FAQ schema in valid JSON-LD

{

"@context": "https://schema.org",

"@type": "FAQPage",

"mainEntity": [

{

"@type": "Question",

"name": "What is the formula for payment authorization rate?",

"acceptedAnswer": {

"@type": "Answer",

"text": "Payment authorization rate is calculated by dividing approved authorization attempts by eligible submitted authorization attempts and multiplying by 100. Merchants should document which transaction outcomes are included in the denominator."

}

},

{

"@type": "Question",

"name": "Is authorization rate the same as payment success rate?",

"acceptedAnswer": {

"@type": "Answer",

"text": "No. Authorization rate measures approved authorization attempts. Payment success rate may include authentication, authorization, capture, and confirmed order completion."

}

},

{

"@type": "Question",

"name": "Should technical errors be included in authorization rate?",

"acceptedAnswer": {

"@type": "Answer",

"text": "Technical errors are normally excluded from an issuer-decision authorization rate because no final issuer decision occurred. They may be included in an end-to-end submitted-attempt success rate."

}

},

{

"@type": "Question",

"name": "Should payment retries count as new authorization attempts?",

"acceptedAnswer": {

"@type": "Answer",

"text": "Yes. Each genuine authorization submission normally counts as a separate attempt in an attempt-level rate. Merchants should also report first-attempt approval and eventual order-level success."

}

},

{

"@type": "Question",

"name": "Do merchant fraud declines belong in the authorization-rate denominator?",

"acceptedAnswer": {

"@type": "Answer",

"text": "Merchant-risk rejections that occur before network submission generally do not belong in an issuer authorization-rate denominator. They should be reported separately as merchant-risk decisions."

}

},

{

"@type": "Question",

"name": "How should partial approvals be treated?",

"acceptedAnswer": {

"@type": "Answer",

"text": "Partial approvals should normally be reported separately. Whether they count as approved depends on whether the merchant can collect the remaining balance and complete the order."

}

},

{

"@type": "Question",

"name": "What is a good payment authorization rate?",

"acceptedAnswer": {

"@type": "Answer",

"text": "There is no universal good authorization rate. Performance varies by market, card type, industry, transaction type, customer mix, authentication, risk policy, and calculation method."

}

},

{

"@type": "Question",

"name": "Why can authorization rate fall while revenue rises?",

"acceptedAnswer": {

"@type": "Answer",

"text": "Retries may increase the number of payment attempts while recovering more orders. This can lower attempt-level authorization rate even as eventual order success and revenue increase."

}

}

]

}

Suggested internal-link anchor text

•how to improve payment authorization rates

•payment approval rate versus conversion rate

•authorization rate versus payment conversion rate

•most common card-decline reasons

•soft declines versus hard declines

•why issuers decline legitimate customers

•how issuer responses affect payment acceptance

•why vague decline codes make optimization difficult

•how authentication affects conversion

•why international cards are declined more often

•payment declines versus checkout abandonment

•local acquiring for international payments

•payment routing and orchestration

•reduce recurring-payment failures

•recover failed subscription payments

•understand payment response codes

•improve cross-border payment performance

Three CTA options

CTA 1

CTA 2

CTA 3

Header-image suggestion

Header image: “The Authorization-Rate Equation”

At the center:

Approved Attempts

─────────────── × 100

Eligible Attempts

Supporting visual elements:

•Green approval response moving back to checkout

•Red and amber branches for decline, timeout, and authentication failure

•Small subtitle: “The formula is simple. The denominator is not.”

Recommended alt text:

“Payment authorization-rate formula showing approved card attempts divided by eligible submitted attempts.”

Supporting infographic suggestions

Infographic 1: “What Belongs in the Authorization-Rate Denominator?”

A decision-tree infographic sorting outcomes into:

•Include in issuer-decision rate

•Include only in end-to-end rate

•Report separately

•Exclude

Cover approvals, issuer declines, technical errors, authentication failures, risk blocks, zero-value checks, test traffic, and unresolved attempts.

Recommended alt text:

“Decision tree explaining which payment outcomes belong in an authorization-rate calculation.”

Infographic 2: “One Payment Funnel, Five Different Rates”

Visualize:

Customer attempts payment

→ Passes merchant risk

→ Completes authentication

→ Receives authorization

→ Gets captured

→ Becomes confirmed order

Show the corresponding metrics:

•Risk acceptance rate

•Authentication completion rate

•Authorization rate

•Capture rate

•Eventual order-level payment success

Recommended alt text:

“Payment funnel comparing risk acceptance, authentication, authorization, capture, and order-success rates.”

Claims requiring final review

Legal and compliance review

•Treatment of response codes under current Visa, Mastercard, American Express, and Discover rules

•Regional requirements involving Strong Customer Authentication

•Stored-credential and merchant-initiated transaction terminology

•Any recommendation affecting fraud controls or restricted-card responses

•PCI DSS implementation language beyond the general educational explanation

Product review

•Reporting dimensions currently available to merchants

•Support for partial approvals, account verification, account updater, or network tokens

•Current Brick error-code mappings and customer-facing recommendations

•Any claim regarding supported currencies, card types, or transaction types

Technical review

•Treatment of timeouts, pending states, and reconciled transactions

•Recommended identifier and event architecture

•Handling of routed and resubmitted attempts

•Authentication-result mapping into authorization reporting

•Whether risk-review outcomes occur before or after authorization in each integration flow

•Current authorization-expiration behavior by acquirer and transaction type