An off-session charge needs the customer to return
Read the existing payment's error, current status and documented next action. Stripe documents authentication_required for some off-session failures: the customer may need to return and participate, so another unattended attempt is not a substitute for that step. Match the failed payment to the still-payable order, verify the intended saved-method use was agreed, and choose the customer-present recovery route supported by the actual integration. The customer completes any bank authentication; support staff must not collect bank codes.
For: A research-only merchant investigating a saved-payment attempt made while the customer was absent from checkout.
Classify the recorded failure before choosing a retry
Off-session describes an attempt made when the customer is not actively in the payment flow. It does not mean every failed saved-card payment has the same cause. Find the payment reference associated with the order or invoice, the time of the failed attempt, its recorded error and its latest state. Keep the provider's wording separate from a store message that merely says payment failed.
Stripe's card-decline guidance documents authentication_required for some off-session failures. It also distinguishes advice such as do_not_try_again, try_again_later and confirm_card_data. Those messages cannot be collapsed into a generic instruction to retry. An authentication requirement points to customer participation; a different error needs its own documented response. If the error or next action is absent, record that gap instead of diagnosing authentication from the fact that the card was saved.
If the cardholder wants the issuer's specific explanation for a decline, Stripe says issuers discuss those details with the cardholder. Support can explain the recorded payment outcome and the store's next step without claiming to know the bank's private reasoning.
Check permission and the unpaid obligation separately
Stripe's save-and-reuse guidance distinguishes saving payment details from charging them. A successful setup does not show that the current order was paid. It also limits future use to the purpose agreed with the customer. Locate the retained consent record rather than assuming that a stored credential authorizes every later order or every recovery attempt.
For offline charges, Stripe describes terms covering initiation of the payment, anticipated timing or frequency, how the amount is determined and cancellation for a subscription. Compare the intended charge with the actual agreed scope. If that record is missing or does not cover the use, stop treating the stored method as sufficient authorization and resolve the appropriate payment arrangement with the customer through the supported flow.
Separately compare the existing order or invoice amount and currency with its payment history. Check whether a later payment already satisfied it, whether an adjustment changed what is due, and whether another attempt remains unresolved. A historical failure is not enough to establish that the full amount is still collectible today. Do not create a second obligation just to get a fresh payment screen.
Choose a supported route where the customer can act
Have the integration owner identify the documented customer-present recovery path for the checkout and payment product actually installed. It should let the customer review the existing obligation, complete the supported payment flow and perform any authentication themselves. Record whether that flow continues the existing payment or creates a replacement, and how its result remains connected to the original order. Do not assume every gateway exposes the same recovery screen or reuses the same payment object.
Before inviting the customer back, assign one owner to coordinate the recovery with any automatic retry process affecting that obligation. Confirm the current payment state and the intended next action through authorized controls so an unattended attempt is not inadvertently competing with the customer-present attempt. This is a coordination requirement, not an instruction to disable an account-wide control or bypass authentication.
Customer communication should identify the order through the store's established channel, say that the payment needs attention and direct the customer to the verified recovery route. Keep one-time codes, bank passwords, card numbers and private payment-link tokens out of support notes and this worksheet. Staff cannot complete the customer's bank challenge by receiving a code over chat. A return to the store or completion of a challenge still needs a matching provider payment result before the order is marked paid.
Close the handoff with the payment result
After the customer acts, reconcile the resulting provider reference and status to the original order and amount. Record whether payment completed, another action remains or a different failure now applies. If a new reference was created, keep the association with the earlier failed attempt so a later support agent does not interpret the old failure as a fresh instruction to collect again. Do not promise that returning guarantees approval.
For a Prism checkout-review consultation, describe the website, research-only products, platform and the authentication-related recovery question. Keep the private timeline and consent record internal; the public form is not their upload channel. Scope, responsibilities, fees and terms are established before work. Follow-up is by email, and an inquiry does not book an appointment, purchase implementation or submit a processing application. The provider remains responsible for eligibility and account terms.
Customer-return requirement
Use this for one real unpaid obligation and its existing failed payment. An authentication requirement selects a customer-present investigation; it does not itself authorize collection. Resolve permission, current amount and overlapping attempts before sending a recovery instruction. Store only internal references and non-sensitive summaries.
Worksheet entries are not submitted by Prism’s worksheet and are not saved by the site. Use record types, availability, anonymized observations, or match/mismatch results. Do not enter government identifiers, customer names or addresses, customer messages, receipt-access links, card or bank details, passwords, or keys. Send sensitive documents only through the provider’s verified secure channel.
Customer-return requirement. The last column is for temporary notes.
Recovery check
Evidence needed
How it changes the next action
Your record
Payment reference
Evidence neededExisting payment identifier, order or invoice association, failure time and latest provider status.
How it changes the next actionFind the actual failed attempt and rule out a later completed payment before continuing.
Recorded next action
Evidence neededExact authentication-related error or other advice from the provider record.
How it changes the next actionCustomer authentication, delayed retry and no-retry advice require different responses; missing evidence remains unknown.
Saved-use permission
Evidence neededInternal reference to the agreement covering initiation, timing, amount basis and subscription cancellation where applicable.
How it changes the next actionSaving a method alone does not establish authorization for this use.
Customer-present route
Evidence neededThe installed integration's documented recovery path and its relationship to the existing payment and order.
How it changes the next actionConfirm the customer can review the obligation and perform the required step; do not invent a payment-link workaround.
Existing order amount
Evidence neededCurrent payable amount and currency reconciled against completed payments, adjustments and unresolved attempts.
How it changes the next actionAvoid collecting an old total or an obligation already satisfied by another payment.
Recovery owner
Evidence neededAuthorized owner coordinating the customer instruction and any automatic retries for this obligation.
How it changes the next actionOne recorded handoff prevents independent staff actions from creating competing attempts.
Recovery outcome
Evidence neededResulting payment reference, latest status and matching order update after the customer acts.
How it changes the next actionClose only from the payment result; a challenge or return page alone is not the receipt.
These are temporary notes. Leaving or reloading this page may clear them. Worksheet entries are not sent automatically. If you copy notes into the consultation message and submit the form, Prism receives them as part of your request.
Limits
Stripe's errors and saved-method guidance are Stripe-specific. The installed integration, payment method and applicable account rules determine the supported recovery path.
Consent to save or reuse a credential, customer authentication, successful payment and merchant eligibility are separate questions. No next-attempt approval is promised.
Never ask staff to collect bank codes, passwords or card details. Keep consent records, customer records and private recovery-link tokens out of the public form and worksheet.
Stripe card declines — checked 2026-09-21. Documents authentication_required for some off-session failures, distinguishes retry advice and says issuers discuss decline specifics with cardholders. It does not establish an unseen payment's cause.
Stripe save a payment method without payment — checked 2026-09-29. Saving in setup mode is separate from charging. Future use must match retained customer consent; offline terms cover initiation, timing or frequency, amount basis and subscription cancellation. This does not establish eligibility or blanket legal approval.
Prism solutions — checked 2026-09-21. Public support includes storefront review, processing preparation and provider website questions. Scope, fees and terms precede work; providers decide eligibility and account terms.
Prism contact — checked 2026-09-21. The public form takes website, products and question without payment details, passwords or customer records. Follow-up is by email; a request is not a booking, purchase or processing application.