Card declined online in Morocco: limits, online payment activation and what to do
Card declined online in Morocco? Online payment limits, cards closed to online payment, 3-D Secure: why it happens, what buyers can do, what merchants can say.
When a card is declined online in Morocco, start with the bank that issued it: the online payment limit is set by that bank, and that is where it is checked and changed, not with the merchant. Four causes come up, in this order: abandonment during 3-D Secure authentication, a decline by the issuing bank (a limit too low or a card closed to online payment), card details entered wrong, and suspected fraud. This guide tells buyers what to check and what to do, and tells merchants what to reply, which alternative to offer and how to spot the step where their customers stop.
Why a card is declined online: the causes, in order
ChariPay is a Moroccan payment platform, a PSP operated by Chari Money, a payment institution licensed by Bank Al-Maghrib. On its payment page, card payments go through 3-D Secure authentication: the cardholder confirms with their bank, which protects the merchant against most unpaid charges and disputes. When a payment does not go through, here are the four causes to look at:
| Cause | Who can act | What to do |
|---|---|---|
| 1. Abandonment during authentication | The buyer | Restart the payment and complete the confirmation their bank asks for |
| 2. Decline by the issuing bank | The buyer, with their bank | Check that the card is open to online payment and that the limit covers the amount |
| 3. Wrong card details | The buyer | Re-enter the number, the expiry date and the CVV |
| 4. Suspected fraud | The buyer's bank | Contact the bank, then try again later |
One detail changes the diagnosis: many Moroccan cards are closed to online payment by default. The merchant, for their part, does not decide the decline. The merchant-side analysis — what an integration can improve, what is out of your hands — is in 3-D Secure and success rates; this guide starts from the buyer.
Are you a merchant? Before writing to your customers, walk their path yourself: Start in test mode. Three fields (name, work email, company), an activation link received by email to choose your password, then the portal, where you create your own test key. Create a link, open it as a customer would and pay with the test card 4918 9141 0719 5005, CVV 123, any future expiry date, 3-D Secure code 555: that way, you go through the payment page and the authentication step. No real money moves.
Online payment limit in Morocco: check it with your bank
This part is for buyers. The online payment limit is a cap that the issuing bank applies to your card; its amount depends on your bank and your card, and nobody but your bank can tell you what it is or change it.
To find out whether it is what blocks your purchase:
- 1Note the exact amount of the purchase. On the ChariPay payment page, everything is in Moroccan dirhams (MAD): that is the amount your limit must cover.
- 2Check your card's online payment limit, in your bank's app or in person, depending on your bank.
- 3If it does not cover the amount, ask your bank whether it can be raised, depending on what it offers.
- 4Try again once your bank confirms the change.
And which cards go through on the ChariPay payment page? By default: Visa, Mastercard and Maroc Pay. Other methods can be enabled on request to the team, depending on your business — a point that concerns the merchant. If your card is among them, your details are right and the authentication went all the way, the answer lies with your bank, not with the page.
Card closed to online payment: get it opened
Many Moroccan cards are closed to online payment by default: a valid card, used every day in stores, can therefore be declined on a website. How to open it depends on each bank — in its app or in person, depending on your bank — and we do not describe it on the bank's behalf.
What to ask your bank, in three questions:
- Is my card open to online payment? If not, ask for it to be opened.
- Does my online payment limit cover the amount of my purchase? If not, ask whether it can be raised.
- From when does the change apply? So you know when to try again.
The merchant can neither open your card nor raise your limit; they can send you a new link, or offer you another way to pay.
3-D Secure authentication: what the cardholder needs to do
When you pay, your bank asks you to confirm the transaction: that is 3-D Secure authentication, which protects the merchant against most unpaid charges and disputes. This is the step where the first cause of failure happens: abandonment.
To get through it:
- Keep the payment page open until the confirmation, without closing it, reloading it or going back.
- Complete the confirmation your bank asks for, the way it has set up for your card.
- If the step is interrupted, restart the payment from the merchant's link, or ask them for a new link.
The other cause you fully control is the card details. A swapped digit in the number, a mistyped expiry date, a wrong CVV: the payment fails. Re-enter the three fields slowly, and check that the card has not expired.
Online payment problem in Morocco: what to do
Did your payment just fail? Follow these steps in order:
- 1Re-read what you entered: card number, expiry date, CVV.
- 2Complete the 3-D Secure authentication your bank asks for, without closing the page.
- 3Check with your bank that the card is open to online payment and that the limit covers the amount, in its app or in person, depending on your bank.
- 4Try again later if your bank has changed a setting or flagged an unusual transaction.
- 5Ask the merchant for a single-use link if your card is still declined: on the page of such a link, you can choose cash, receive a reference and pay it at an agency of the Chari network. How it works is explained in collecting cash at an agency.
- 6Never share your card details by message, email or phone, even with a merchant you know: you enter them yourself on the payment page, and nowhere else.
For merchants: message templates to send
A customer whose card is declined may conclude that your store is broken. A short message that points them to their bank without naming it, and gives them a concrete next step, saves the sale. Three templates:
The customer tells you their card was declined.
Hello, thanks for your message. A card decline comes from the bank that issued the card: please check with them (in their app or in person, depending on your bank) that your card is open to online payment and that its limit covers MAD [amount]. Here is a new link to try again: [link]. If you prefer, we can also send you a link on which you can choose to pay in cash at an agency.
The customer started paying but did not finish.
Hello, your payment did not complete. When you pay, your bank asks you to confirm the transaction: the payment only goes through once that step is complete. You can pick up where you left off with this link: [link]. Keep the page open until the confirmation.
The order is a large amount.
Hello, for an amount of MAD [amount], the online payment limit on some cards may not be enough. Your bank can tell you yours and, depending on what it offers, raise it. Once that is done, this link is still available to you: [link]. We can also send you a link on which you can choose to pay in cash at an agency.
Three rules: name no bank, promise no timeframe, never ask for card details. And reassuring before the payment beats reassuring after a decline: see secure online payment.
Offer an alternative without losing the sale
When the card does not go through, offer another way to pay. ChariPay is the only payment gateway in Morocco that also collects cash at agencies. On the page of a single-use payment link, your customer chooses cash, receives a reference, pays it at an agency of the Chari network, and you are notified as soon as the network confirms the deposit. Cash payment at an agency always relies on a single-use link — one reference per deposit.
| Tool | Card with 3-D Secure | Cash at an agency |
|---|---|---|
| Single-use payment link | Yes | Yes, the customer chooses on the page |
| Reusable link, poster or QR code left permanently on the counter | Yes | No |
| Checkout session created through the API | Yes | No |
For a customer whose card was declined, create a single-use link for the order amount, from the portal or through the API — where paymentMethod: "CASH" preselects cash on the page; otherwise the customer chooses between card and cash. As soon as the network confirms the deposit, the link turns "Paid" and you are notified in the portal.
One setting to know before you send that link. In the portal, turning on "Agency payment" on a link disables its expiry: the link stays payable with no time limit. A link with an expiry date is therefore presented as a link to be paid by card; for a customer who pays in cash, create a link with "Agency payment", without an expiry. The other settings are described on the payment links page.
One precaution: if the order already had a link or session still open, cancel it before sending the new link. One open payment route per order is what keeps you from collecting twice.
Measure where your buyers drop off
Messages handle cases one at a time; measurement tells you where the problem is. The portal shows the funnel of a link or a session — how many opened the page, how many entered their card, how many completed — and the Customer journey module of the API docs exposes a resource's funnel summary and event detail.
| Where they stop | What it suggests | Your action |
|---|---|---|
| They open the page without entering a card | The offer, the amount or trust | Rework the message that comes with the link |
| They enter their card without completing | Authentication or the bank | The templates above, a single-use link ready to send |
| They complete | Nothing to fix | Confirm the order on the webhook or the "Paid" status |
On a single-use link, a customer who chooses cash never enters a card: check the link's status before concluding that the offer put them off. Read the funnel of your own links and sessions rather than looking for a benchmark. For the bigger picture on the store side, see the guide to e-commerce payments in Morocco, and the FAQ for short answers.
Frequently asked questions
Why is my card declined when I pay online?
Four causes, in this order: abandonment during 3-D Secure authentication, a decline by the issuing bank, wrong card details, and suspected fraud. A bank decline can come from a card closed to online payment — many Moroccan cards are by default — or from a limit that does not cover the amount. Your bank can confirm which applies and tell you what to do.
How do I find my card's online payment limit?
Ask your bank, in its app or in person, depending on your bank: it sets the limit, and the amount depends on your bank and your card. The merchant does not know it. Compare it with the purchase amount, shown in dirhams, and ask your bank whether it can be raised if needed, then try again once the change is confirmed.
How do I open my card to online payment?
The process depends on your bank: it is done in its app or in person, depending on your bank. Ask for three things: opening the card to online payment, a limit that covers the amount of your purchase, and when the change takes effect. Then try the payment again with the merchant's link or a new one they send you, without sharing your card details with anyone.
Which cards are accepted on the ChariPay payment page?
By default: Visa, Mastercard and Maroc Pay. Other methods can be enabled on request to the team, depending on your business, if you are the merchant. Card payments go through 3-D Secure authentication, and amounts are in Moroccan dirhams. On a single-use link, the customer can also choose to pay in cash at an agency of the Chari network.
Can I pay in cash when my card is declined?
Yes, if the merchant sends you a single-use payment link: on its page, you choose cash, receive a reference and pay it at an agency of the Chari network; the merchant is notified as soon as the network confirms the deposit. A poster or a QR code left permanently on the counter, like a checkout session created through the API, only takes cards.
Should I send my card details to the merchant by message?
Never. You enter your card yourself on the payment page, and nowhere else: not by message, not by email, not over the phone. A merchant who collects with a payment link does not need it and never sees your card number. A request for your number or a code "to unblock the payment" should put you on alert.
What message should I send a customer whose card was declined?
A short, reassuring one: the decline comes from the bank that issued the card, which can check whether it is open to online payment and its limit; a new link to try again; and the option of a single-use link on which they can choose to pay in cash at an agency. Name no bank, promise no timeframe, and never ask for card details.
How do I know at which step my customers abandon payment?
The portal shows the funnel of each link and each session: how many opened the page, how many entered their card, how many completed. The Customer journey API module exposes the same summary and the event detail. Cash aside, a drop before card entry points to your offer; a drop after it points to authentication or the bank.
Next step
Prepare your three message templates and a single-use link ready to send, then try them on yourself: Start in test mode, create the link and pay it with the test card, as a customer would. To go further on the integration side, read 3-D Secure and success rates; for cash, see collecting cash at an agency.
Written by ChariPay team.