← Research
Payments desk21 July 202611 min

Approval-rate decay: how to read a payment cascade properly

A group approval rate is an average of averages, and it hides the only thing you need to see. Decomposition by issuer country, card scheme, and attempt index is where the money is.

Group approval rate is the most-watched and least-useful number in broker payments. It is an average over corridors that behave nothing like each other, weighted by volume that shifts underneath you. A corridor can fail completely while the headline moves by less than a point.

The aggregation problem

Approval is not one process. It is a chain of independent decisions, your gateway, the acquirer, the scheme, and finally the issuing bank, and only the last of those actually declines most transactions. Issuers behave differently by country, by card product, and by how they read the merchant descriptor. Averaging across them destroys the signal.

What the group number isapproval_group = Σ(approvals_i) / Σ(attempts_i) for every corridor i
Volume-weighted. A corridor at 8% of volume can halve in approval and move the group figure by roughly one point.
Group approval steady at 68%, one corridor collapsing
DE · Visa74%
UK · Mastercard71%
PL · Visa69%
BR · Mastercard52%
Illustrative. BR·Mastercard has fallen 19 points. Because it carries 8% of attempts, the group rate moved from 69.6% to 68.1%, inside normal weekly variance.

If your alerting is on the group rate, you will find out at month end, from the finance team, in a variance report.

The decomposition that works

Split attempts along four axes and monitor the cells, not the total. Anything coarser hides the failure; anything finer produces cells too small to be significant.

AxisWhy it mattersTypical cardinality
Issuer countryLocal issuer risk policy dominates the decline decision10 to 40
Scheme and productDebit, credit and prepaid decline for different reasons4 to 8
Acquirer or PSPIsolates whether the problem is yours or theirs3 to 12
Attempt indexSeparates first-attempt failure from cascade behaviour1 to 4

The fourth axis is the one most often missing. A corridor with a 62% first-attempt rate and an 81% final rate after retry is healthy. A corridor at 62% and 63% is not, the cascade is not doing anything and you are paying scheme fees for the attempts.

Reading a cascade properly

A three-attempt cascade, and what each stage tells you
  1. 01Attempt 1, primary acquirerBaseline issuer behaviour
  2. 02Soft decline05, 51, 61, retryable
  3. 03Attempt 2, alternate acquirerDifferent BIN routing, different descriptor
  4. 04Hard decline04, 14, 41, 43, never retry
  5. 05Attempt 3, local railDifferent rails entirely, if you have one
Retrying a hard decline costs a fee and raises your decline ratio with the scheme. Retrying a soft decline on the same acquirer usually reproduces the same answer.

Response codes are the whole game

Treating declines as one category is what makes cascades useless. A 51 (insufficient funds) is worth retrying tomorrow, not in four seconds. A 05 (do not honour) is a generic issuer refusal and often clears through a different acquirer with a different descriptor. A 41 (lost card) must never be retried at all. The difference between a cascade that recovers 15 points and one that recovers two is almost entirely in this mapping.

Worked exampleWhere the recoverable money sits
CorridorAttempts / moApprovalBest alternativeRecoverable
BR · Mastercard14,20052%69% (tested)$19,400
TR · Visa debit6,05058%64% (tested)$4,100
VN · local rail3,40041%none liveunknown
The third row is the honest one. Detection tells you the corridor is broken; without a tested alternative there is no recovery figure to quote, only a decision to go and find one.

Illustrative figures, chosen to show the mechanism. Your own numbers will differ.

Detection is the easy half

Any competent analyst can find a broken corridor given a week and the right export. The difficulty is that the finding has a short shelf life and an unhelpful shape: it arrives as “this route is down 19 points” and what the business needs is “move this traffic here, today, and recover this much.”

That second sentence requires something the alert does not have, continuously maintained performance data for every alternative route on the same corridor, current contracted costs, and enough recent volume through the alternative to trust the number. Without it, a detection is a task for somebody. With it, it is a decision that takes ten seconds to approve.

Written by the people who built the thing.

If you want to argue with any of the above, we would enjoy that. The same desk that wrote this runs the scoping calls.