Skip to content
Create account
 or
Sign in
The Stripe Docs logo
/
Create account
Sign in

Error handling

Catch and respond to declines, invalid data, network problems, and more.

Stripe offers many kinds of errors. They can reflect external events, like declined payments and network interruptions, or code problems, like invalid API calls.

To handle errors, use some or all of the techniques in the table below. No matter what technique you use, you can follow up with our recommended responses for each error type.

TechniquePurposeWhen needed
Catch exceptionsRecover when an API call can’t continueAlways
Monitor webhooksReact to notifications from StripeSometimes
Get stored information about failuresInvestigate past problems and support other techniquesSometimes

Catch exceptions

If an immediate problem prevents an API call from continuing, the Stripe Node.js library can raise an exception. It’s a best practice to catch and handle exceptions. To enable exception raising and catch the exception, do the following: raising and catch the exception, you need to do several things:

  • If you make the API call in a function, precede the function definition with the async keyword.
  • Precede the API call itself with the await keyword.
  • Wrap the API call in a try/catch block.

When you catch an exception, you can use its type attribute to choose a response.

const stripe = require('stripe')(
'sk_test_4eC39HqLyjWDarjtT1zdp7dc'
);

async function exampleFunction(args) {
  try {
    const paymentIntent = await stripe.paymentIntents.create(args);
    console.log('No error.');
  } catch (e) {
    switch (e.type) {
      case 'StripeCardError':
        console.log(`A payment error occurred: ${e.message}`);
        break;
      case 'StripeInvalidRequestError':
        console.log('An invalid request occurred.');
        break;
      default:
        console.log('Another problem occurred, maybe unrelated to Stripe.');
        break;
    }
  }
}

After setting up exception handling, test it on a variety of data, including test cards, to simulate different payment outcomes.

exampleFunction({
  // The required parameter currency is missing
  amount: 2000,
  confirm: true,
  payment_method: 
'pm_card_visa'
,
})
console
An invalid request occurred.

Monitor webhooks

Stripe notifies you about many kinds of problems using webhooks. This includes problems that don’t follow immediately after an API call. For example:

  • You lose a dispute.
  • A recurring payment fails after months of success.
  • Your frontend confirms a payment, but goes offline before finding out the payment fails. (The backend still receives webhook notification, even though it wasn’t the one to make the API call.)

You don’t need to handle every webhook event type. In fact, some integrations don’t handle any.

In your webhook handler, start with the basic steps from the webhook builder: get an event object and use the event type to find out what happened. Then, if the event type indicates an error, follow these extra steps:

  1. Access event.data.object to retrieve the affected object.
  2. Use stored information on the affected object to gain context, including an error object.
  3. Use its type to choose a response.
const stripe = require('stripe')(
'sk_test_4eC39HqLyjWDarjtT1zdp7dc'
);
const express = require('express');
const app = express();

app.post('/webhook', express.json({type: 'application/json'}), (request, response) => {

  // Get an event object
  const event = request.body;

  // Use its type to find out what happened
  if (event.type == 'payment_intent.payment_failed') {

    // Get the object affected
    const paymentIntent = event.data.object;

    // Use stored information to get an error object
    const error = paymentIntent.last_payment_error;

    // Use its type to choose a response
    switch (error.type) {
      case 'card_error':
        console.log(`A payment error occurred: ${error.message}`);
        break;
      case 'invalid_request_error':
        console.log('An invalid request occurred.');
        if (error.param) {
          console.log(`The parameter ${error.param} is invalid or missing.`);
        }
        break;
      default:
        console.log('Another problem occurred, maybe unrelated to Stripe.');
        break;
    }
  }
  response.send();
});

app.listen(4242, () => console.log('Running on port 4242'));

To test how your integration responds to webhook events, you can trigger webhook events locally. After completing the setup steps at that link, trigger a failed payment to see the resulting error message.

Command Line
stripe trigger payment_intent.payment_failed
Output
A payment error occurred: Your card was declined.

Get stored information about failures

Many objects store information about failures. That means that if something already went wrong, you can retrieve the object and examine it to learn more. In many cases, stored information is in the form of an error object, and you can use its type to choose a response.

For instance:

  1. Retrieve a specific payment intent.
  2. Check if it experienced a payment error by determining if last_payment_error is empty.
  3. If it did, log the error, including its type and the affected object.
const stripe = require('stripe')(
"sk_test_4eC39HqLyjWDarjtT1zdp7dc"
);

const payment_intent = await stripe.paymentIntents.retrieve(
'{{PAYMENT_INTENT_ID}}'
)

const e = payment_intent.last_payment_error

if (e !== null) {
  console.log(`PaymentIntent ${payment_intent.id} experienced a ${e.type} error.`)
}

Here are common objects that store information about failures.

ObjectAttributeValues
Payment Intentlast_payment_errorAn error object
Setup Intentlast_setup_errorAn error object
Invoicelast_finalization_errorAn error object
Setup Attemptsetup_errorAn error object
Payoutfailure_codeA payout failure code
Refundfailure_reasonA refund failure code

To test code that uses stored information about failures, you often need to simulate failed transactions. You can often do this using test cards or test bank numbers. For example:

Types of error and responses

In the Stripe Node.js library, each error object has a type attribute. Use the documentation for each type for advice about how to respond.

Name

Type

Description
Payment error

StripeCardError

An error occurred during a payment, involving one of these situations:
Invalid request error

StripeInvalidRequestError

You made an API call with the wrong parameters, in the wrong state, or in an invalid way.

Connection error

StripeConnectionError

There was a network problem between your server and Stripe.
API error

StripeAPIError

Something went wrong on Stripe’s end. (These are rare.)
Authentication error

StripeAuthenticationError

Stripe can’t authenticate you with the information provided.
Idempotency error

StripeIdempotencyError

You used an idempotency key for something unexpected, like replaying a request but passing different parameters.
Permission error

StripePermissionError

The API key used for this request does not have the necessary permissions.
Rate limit error

StripeRateLimitError

You made too many API calls in too short a time.
Signature verification error

StripeSignatureVerificationError

You’re using webhook signature verification and couldn’t verify that a webhook event is authentic.

Payment errors

Payment errors—sometimes called “card errors” for historical reasons—cover a wide range of common problems. They come in three categories:

To distinguish these categories or get more information about how to respond, consult the error code, decline code, and charge outcome.

(To find the charge outcome from an error object, first get the Payment Intent that’s involved and the latest Charge it created. See the example below for a demonstration.)

const stripe = require('stripe')(
'sk_test_4eC39HqLyjWDarjtT1zdp7dc'
);

async function exampleFunction(args) {
    try {
      const paymentIntent = await stripe.paymentIntents.create(args);
    } catch (e) {
      console.log(e)
      const charge = await stripe.charges.retrieve(e.payment_intent.latest_charge)
      if (e.type === 'StripeCardError') {
        if (charge.outcome.type === 'blocked') {
          console.log('Payment blocked for suspected fraud.')
        } else if (e.code === 'card_declined') {
          console.log('Payment declined by the issuer.')
        } else if (e.code === 'expired_card') {
          console.log('Card expired.')
        } else {
          console.log('Other card error.')
        }
      }
    }
  }

Users on API version 2022-08-01 or older:

(To find the charge outcome from an error object, first get the Payment Intent that’s involved and the latest Charge it created. See the example below for a demonstration.)

const stripe = require('stripe')(
'sk_test_4eC39HqLyjWDarjtT1zdp7dc'
);

async function exampleFunction(args) {
    try {
      const paymentIntent = await stripe.paymentIntents.create(args);
    } catch (e) {
      console.log(e)
      if (e.type === 'StripeCardError') {
        if (e.payment_intent.charges.data[0].outcome.type === 'blocked') {
          console.log('Payment blocked for suspected fraud.')
        } else if (e.code === 'card_declined') {
          console.log('Payment declined by the issuer.')
        } else if (e.code === 'expired_card') {
          console.log('Card expired.')
        } else {
          console.log('Other card error.')
        }
      }
    }
  }

You can trigger some common kinds of payment error with test cards. Consult these lists for options:

The test code below demonstrates a few possibilities.

exampleFunction({
  currency: 'usd',
  amount: 2000,
  confirm: true,
  payment_method: 
'pm_card_radarBlock'
,
})
console
Payment blocked for suspected fraud.

Payment blocked for suspected fraud

Type

StripeCardError

Codes
const charge = await stripe.charges.retrieve(e.payment_intent.latest_charge)
charge.outcome.type === 'blocked'
Codes

e.payment_intent.charges.data[0].outcome.type === 'blocked'

ProblemStripe’s fraud prevention system, Radar, blocked the payment

Solutions

This error can occur when your integration is working correctly. Catch it and prompt the customer for a different payment method.

To block fewer legitimate payments, try these:

Radar for Fraud Teams customers have these additional options:

  • To exempt a specific payment, add it to your allowlist. Radar for Fraud Teams
  • To change your risk tolerance, adjust your risk settings. Radar for Fraud Teams
  • To change the criteria for blocking a payment, use custom rules. Radar for Fraud Teams

You can test your integration’s settings with test cards that simulate fraud. If you have custom Radar rules, follow the testing advice in the Radar documentation.

Payment declined by the issuer

Type

StripeCardError

Codes

e.code === 'card_declined'

ProblemThe card issuer declined the payment.

Solutions

This error can occur when your integration is working correctly. It reflects an action by the issuer, and that action may be legitimate. Use the decline code to determine what next steps are appropriate. See the documentation on decline codes for appropriate responses to each code.

You can also:

Test how your integration handles declines with test cards that simulate successful and declined payments.

Other payment errors

Type

StripeCardError

ProblemAnother payment error occurred.
SolutionsThis error can occur when your integration is working correctly. Use the error code to determine what next steps are appropriate. See the documentation on error codes for appropriate responses to each code.

Invalid request errors

Type

StripeInvalidRequestError

Problem You made an API call with the wrong parameters, in the wrong state, or in an invalid way.
Solutions In most cases, the problem is with the request itself. Either its parameters are invalid or it can’t be carried out in your integration’s current state.
  • Consult the error code documentation for details on the problem.
  • For convenience, you can follow the link at e.doc_url for documentation about the error code.
  • If the error involves a specific parameter, use e.param to determine which one.

Connection errors

Type

StripeAPIConnectionError

ProblemThere was a network problem between your server and Stripe.

Solutions

Treat the result of the API call as indeterminate. That is, don’t assume that it succeeded or that if failed.

To find out if it succeeded, you can:

  • Retrieve the relevant object from Stripe and check its status.
  • Listen for webhook notification that the operation succeeded or failed.

To help recover from connection errors, you can:

  • When creating or updating an object, use an idempotency key. Then, if a connection error occurs, you can safely repeat the request without risk of creating a second object or performing the update twice. Repeat the request with the same idempotency key until you receive a clear success or failure. For advanced advice on this strategy, see Low-level error handling.
  • Turn on automatic retries. Then, Stripe generates idempotency keys for you, and repeats requests for you when it is safe to do so.

This error can mask others. It’s possible that when the connection error resolves, some other error becomes apparent. Check for errors in all of these solutions just as you would in the original request.

API errors

Type

StripeAPIError

ProblemSomething went wrong on Stripe’s end. (These are rare.)

Solutions

Treat the result of the API call as indeterminate. That is, don’t assume that it succeeded or that it failed.

Rely on webhooks for information about the outcome. Whenever possible, Stripe fires webhooks for any new objects we create as we solve a problem.

To set your integration up for maximum robustness in unusual situations, see this advanced discussion of server errors.

Authentication errors

Type

StripeAutheticationError

ProblemStripe can’t authenticate you with the information provided.
Solutions

Idempotency errors

Type

StripeIdempotencyError

ProblemYou used an idempotency key for something unexpected, like replaying a request but passing different parameters.
Solutions
  • After you use an idempotency key, only reuse it for identical API calls.
  • Use idempotency keys under the limit of 255 characters.

Permission errors

Type

StripePermissionError

ProblemThe API key used for this request does not have the necessary permissions.
Solutions
  • Are you using a restricted API key for a service it doesn’t have access to?
  • Are you performing an action in the Dashboard while logged in as a user role that lacks permission?

Rate limit errors

Type

StripeRateLimitError

ProblemYou made too many API calls in too short a time.
Solutions
  • If a single API call triggers this error, wait and try it again.
  • To handle rate-limiting automatically, retry the API call after a delay, and increase the delay exponentially if the error continues. See the documentation on rate limits for further advice.
  • If you anticipate a large increase in traffic and want to request an increased rate limit, contact support in advance.

Signature verification errors

Type

StripeSignatureVerificationError

ProblemYou’re using webhook signature verification and couldn’t verify that a webhook event is authentic.

Solutions

This error can occur when your integration is working correctly. If you use webhook signature verification and a third party attempts to send you a fake or malicious webhook, then verification fails and this error is the result. Catch it and respond with a 400 Bad Request status code.

If you receive this error when you shouldn’t—for instance, with webhooks that you know originate with Stripe—then see the documentation on checking webhook signatures for further advice. In particular, make sure you’re using the correct endpoint secret. This is different from your API key.

Was this page helpful?
YesNo
Need help? Contact Support.
Join our early access program.
Check out our product changelog.
Questions? Contact Sales.
Powered by Markdoc