Payment controls and records

The same order asks the buyer to authenticate repeatedly

Build a timeline that ties each reported prompt and retry to the store order, the provider payment reference and its recorded state at that time. Repeated prompts attached to the same payment reference differ from newly created payment objects, but neither pattern alone proves a duplicate charge or a defect. Check every associated payment's current outcome before directing another attempt. If a charge may already exist, resolve that uncertainty first.

For: A research-only merchant whose buyer sees repeated authentication prompts while trying to pay for one order.

Updated 2026-10-01

Follow the payment reference through each prompt

Start with the existing order and the buyer's sequence: when the prompt appeared, whether they returned to checkout, and when they pressed Pay again. Record the time zone and distinguish the buyer's recollection from timestamps in store or provider records. Do not ask for a recording of bank codes or the authentication screen's private contents.

For each event, find the linked provider payment object. On Stripe, compare the PaymentIntent identifier across events; keep any charge or authentication reference in its own field. A changing charge reference is not by itself evidence that a new PaymentIntent was created. Conversely, the same store order number does not establish that all attempts used one PaymentIntent. If the gateway notes omit a reference, mark the link unresolved instead of joining records solely because their amounts match.

Separate an unfinished action from a later attempt

Stripe's lifecycle distinguishes requires_confirmation, when confirmation is still needed, from requires_action, when a further action such as authentication is required. A failed payment attempt can return the PaymentIntent to requires_payment_method. Therefore, the same identifier can have a history containing both an earlier action request and a later failed attempt. Its current status does not reconstruct the entire sequence.

A repeated requires_action observation on the same reference supports investigating an unresolved action or how checkout resumes it. A recorded failure followed by a later confirmation on that reference supports investigating a subsequent attempt within the same payment flow. Different PaymentIntent identifiers establish separate payment objects; compare their creation times with actual retry times to see which events coincide. These are investigation branches, not proof that a browser refresh, plugin or issuer caused the repetition.

Keep canceled payments separate: Stripe says cancellation cannot be undone. Reusing a store order cannot reopen a canceled PaymentIntent. Do not infer that every new identifier is erroneous, since an earlier canceled payment and an authorized recovery can legitimately be different records.

Establish whether anything remains payable

Read the latest provider outcome for every payment linked to the order, including ones the store no longer displays as its current attempt. A completed payment, an authorization awaiting capture, a payment still processing and a failed attempt require different handling. Stripe's lifecycle allows asynchronous processing to take days; elapsed time alone is not evidence of failure. Authentication progress also does not establish what the store recorded as paid.

WooCommerce's troubleshooting guidance says to identify the gateway from the order or its notes and confirm that the first attempt created no charge before asking for another payment. A provider charge paired with an unchanged store order belongs in a store-to-provider reconciliation. A missing order note can indicate missing gateway communication; it is not evidence of no charge. Apply the same check across the repeated attempts before deciding that the order still needs payment.

Give the next owner a bounded question

Once the timeline is joined, state the unresolved question precisely: whether an existing action is being resumed, why a new payment object appeared at a retry, or why the store still invites payment after the provider recorded a charge. Keep the evidence pointers with the authorized integration owner. If records cannot establish which payment belongs to a prompt, say that the association remains unknown and pause another payment instruction.

For a Prism checkout-review consultation, describe the website, research-only products, platform and repeated-prompt pattern without attaching customer records. The consultation establishes the requested investigation, responsibilities, fees and terms before work. Follow-up is by email; a request does not book an appointment, buy implementation or submit a processing application.

Repeated-challenge timeline

Use one sheet for an actual order. In the event rows, record a chronological list with time zones and evidence pointers. Compare payment-object identities before counting attempts, then check all current outcomes. Missing links mean the payable state remains unresolved. Keep this internal; do not enter card data, codes, secrets or private payment URLs.

Worksheet entries are not submitted by Prism’s worksheet and are not saved by the site. Use record types, availability, anonymized observations, or match/mismatch results. Do not enter government identifiers, customer names or addresses, customer messages, receipt-access links, card or bank details, passwords, or keys. Send sensitive documents only through the provider’s verified secure channel.

Repeated-challenge timeline. The last column is for temporary notes.
Timeline itemEvidence to compareDecision it supportsYour record
Order referenceThe internal order reference, gateway name, amount and currency from the existing order.Fixes which obligation is being investigated; an order label alone does not establish payment.
Payment referencesEach linked PaymentIntent or equivalent payment-object identifier, its creation time and separately labeled charge references.Shows whether prompts concern one payment object or several without counting every reference as a charge.
Challenge outcomesDated action requests, recorded outcomes and subsequent payment states; mark unavailable history explicitly.Distinguishes an unresolved action from an attempt that failed and was followed by another confirmation.
Retry timesBuyer-reported retry sequence alongside store and provider timestamps, with their time zones.Shows temporal matches without treating a buyer report as a provider event or a proven cause.
Current payable stateLatest outcome of every linked payment, any charge or authorization, and the current order total.A charge or unresolved outcome blocks a casual instruction to pay again.
Next investigation ownerThe specific missing association or status conflict and the authorized person who can retrieve it.Keeps the handoff focused on the unresolved record rather than another uncontrolled retry.

These are temporary notes. Leaving or reloading this page may clear them. Worksheet entries are not sent automatically. If you copy notes into the consultation message and submit the form, Prism receives them as part of your request.

Limits

  • Stripe lifecycle names apply to Stripe PaymentIntents; WooCommerce order guidance applies to WooCommerce. Another integration needs its own documented states.
  • Repeated prompts, separate payment objects and duplicate charges are different observations. This worksheet establishes no unseen cause or guaranteed recovery.
  • Technical recovery does not establish provider eligibility for a research-only business or legal approval. Do not collect authentication codes or put customer records in the public consultation form.

Sources

  • PaymentIntent and SetupIntent lifecycle — checked 2026-09-29. Distinguishes confirmation from further action, records failed attempts returning to requires_payment_method, and describes processing, capture and cancellation states. Cancellation cannot be undone; these states do not diagnose a merchant's repeated prompts.
  • WooCommerce: Troubleshooting orders — checked 2026-09-21. Identify the gateway on the order or in notes; confirm no charge before retrying. Missing notes can indicate missing gateway communication, and a charge with a pending order requires reconciliation.
  • Prism solutions — checked 2026-09-21. Published help includes storefront review, processing preparation and provider website questions. Scope, fees and terms precede work; the provider decides eligibility and account terms.
  • Prism contact — checked 2026-09-21. The form asks for website, products and question, excludes sensitive payment and customer records, and leads to email follow-up rather than a booking, purchase or processing application.

Get help with checkout

Is this happening on your own store?