Dunning

What Is Dunning?

Dunning is the systematic process of communicating with customers to collect overdue payments. In subscription billing, it refers specifically to the automated workflows that retry failed charges, send notification emails, and manage grace periods before cancelling a subscriber's account. The term originates from the 17th-century verb "dun," meaning to insist on payment of a debt.

Modern dunning management goes well beyond sending collection notices. It combines machine-learning-optimized retry timing, multi-channel customer notifications, card-on-file update services, and network tokenization to recover revenue that would otherwise be lost to involuntary churn. For SaaS companies and any business relying on recurring billing, dunning is a core revenue operations function.

How It Works

A dunning system operates in three phases: prevention before a payment fails, recovery in the days after a failure, and escalation if recovery attempts are exhausted.

Prevention

The first line of defense activates before a payment ever fails. Payment processors offer card account updater services (Visa Account Updater, Mastercard Automatic Billing Updater) that automatically refresh stored card details when issuers reissue cards. These services update 20-35% of affected cards in the first month. Pre-expiry reminders sent 30 days before a card expires give customers a chance to update their information proactively.

Recovery

When a payment fails, the dunning engine begins its retry sequence. A typical schedule looks like this:

1. Initial failure occurs on billing date. The system classifies the decline code as a soft decline (recoverable) or hard decline (permanent)
2. First retry fires 24-48 hours later. For insufficient-funds declines, delaying 24 hours rather than retrying immediately improves recovery rates by roughly 6.5%
3. Second retry on day 3-5. The system sends the first customer notification email with a direct link to update payment details
4. Third retry on day 7-10. A follow-up email warns that service access may be affected
5. Grace period ends around day 14. Most recovered transactions occur within the first 10 days

Card networks permit multiple retry attempts within defined windows: Visa allows up to 15 retries within 120 days for the same transaction. In practice, 3-5 attempts spread over 10-14 days is the optimal range for most merchants. Beyond that, additional retries rarely succeed and can increase a merchant's risk profile with processors.

Escalation

If recovery attempts fail, the system escalates. The subscription may be paused rather than immediately cancelled, preserving the customer relationship while preventing further failed charges. For high-value accounts, personal outreach replaces automated emails. Hard cancellation typically occurs after 30-90 days of unresolved payment failure.

Example Dunning Email Sequence

Effective dunning emails are brief, neutral in tone, and focused on a single call to action: updating the payment method. A common seven-email sequence:

Day 0:   Friendly notification — "We couldn't process your payment"
Day 3:   Gentle reminder — link to update card
Day 7:   Direct — service may be paused soon
Day 10:  Urgent — final notice before access restriction
Day 13:  Critical — account will be paused in 48 hours
Day 20:  Re-engagement — account is paused, here's how to reactivate
Day 27:  Final — last chance before cancellation

The most impactful element in any dunning email is a direct link to update payment details without requiring a login. Multi-channel dunning (email, SMS, and in-app banners) reduces involuntary churn by up to 34% compared to email-only approaches.

Smart Retry Strategies

Basic dunning uses fixed retry schedules. Smart dunning uses machine-learning models trained on billions of transactions to select the optimal moment for each retry attempt.

ML-Optimized Timing

Platforms like Stripe Smart Retries analyze signals across their entire network: time of day, day of week, card type, issuing bank behavior, and historical retry success patterns. Retries timed to midweek mornings (Tuesday through Thursday, 9-11am in the customer's local time zone) show the highest recovery rates. Insufficient-funds declines benefit from delays aligned with typical payroll cycles.

Network Tokenization

Network tokens issued by Visa and Mastercard replace raw card numbers with cryptographic tokens that auto-update when cards are reissued. This prevents an entire category of dunning failures: the expired or reissued card. Visa data shows network tokenization improves authorization rates by approximately 4.7% while reducing ecommerce fraud by about one-third.

Multi-Gateway Routing

Routing failed transactions through alternate payment gateways can achieve 7-13 percentage point approval lifts compared to single-processor setups. Different processors have different relationships with issuing banks, so a decline on one gateway may succeed on another.

Why Dunning Matters

The financial impact of payment failures on subscription businesses is substantial. According to Recurly's analysis of the $1.5 trillion global subscription market, failed payments cost businesses an estimated $129 billion in 2025. The average subscription company loses roughly 9% of its monthly recurring revenue to failed charges.

Involuntary churn from payment failures accounts for 20-40% of all subscription churn, making it the single largest controllable source of revenue loss. Without dunning automation, 60-69% of payment failures result in permanent revenue loss. With comprehensive dunning (smart retries, email sequences, card updaters, and network tokens), top performers recover 70-85% of failed payments. Stripe's recovery tools alone helped merchants recover over $8.2 billion in 2025.

For a deeper look at how subscription billing infrastructure handles these challenges, see the research article on subscription billing infrastructure.

Common Failure Reasons

Understanding why payments fail is critical to building effective dunning strategies. Failures fall into three categories:

Soft Declines

Soft declines account for 70-90% of all card-not-present failures and are often recoverable with retries:

• Insufficient funds: the most common reason, accounting for roughly 44% of all declines
• Generic "do not honor" responses from issuing banks (decline code 05)
• Temporary holds or velocity checks on the account
• Issuer system timeouts or processing errors

Hard Declines

Hard declines are permanent and should not be retried:

• Expired card (decline code 54)
• Lost or stolen card reported to issuer
• Account closed or frozen
• Invalid card number

Fraud and Risk Flags

Risk-based declines from fraud detection systems, CVV mismatches, or geographic anomalies account for 10-15% of failures. These intersect with broader payment fraud prevention strategies.

Dunning vs. Push-Based Payments

The entire dunning problem exists because traditional card billing uses a pull payment model: the merchant initiates a charge against a stored card number, and the charge can fail for dozens of reasons outside the merchant's control. Each failure triggers the dunning machinery of retries, emails, and grace periods.

Push payment systems (including stablecoin transfers, real-time payment networks, and direct bank transfers) invert this model. The payer initiates and authorizes each transfer directly, eliminating several categories of failure:

• No card expirations: crypto wallets and bank accounts do not expire like card numbers
• No issuing-bank declines: there is no intermediary bank deciding whether to approve or reject the charge
• No chargebacks: funds are verified and transferred at execution, with no dispute mechanism that reverses settled payments
• No decline codes: the transaction either succeeds (sufficient balance) or fails (insufficient balance) with no ambiguous soft-decline states

Stablecoin-based subscription billing is emerging as a practical alternative. Smart contract approvals allow automated recurring withdrawals from a customer's wallet at defined intervals, combining the convenience of automated billing with the reliability of push payments. The tradeoff: if a wallet lacks sufficient funds, the failure is a hard failure with no retry mechanism, since there is no issuer to approve a later attempt.

For a comparison of traditional and stablecoin-based payment infrastructure, see the research on stablecoin payment rails vs. traditional systems.

Risks and Considerations

Over-Retrying

Excessive retry attempts can backfire. Card networks track retry rates per merchant, and high retry volumes can trigger monitoring programs or fines. Retrying hard declines wastes processing capacity and signals poor payment hygiene. The best dunning systems classify decline codes and only retry those with a reasonable chance of success.

Customer Experience

Aggressive dunning emails can damage the customer relationship. Debt-collection language, excessive urgency, or too-frequent emails push customers toward cancellation rather than payment recovery. Studies show that 60% of customers who encounter a failed payment will cancel if forced to manually update their payment method, making frictionless update flows essential.

Regulatory Compliance

In the United States, dunning communications are subject to the Fair Debt Collection Practices Act (FDCPA) and state-level consumer protection laws. The line between subscription payment reminders and debt collection can blur, particularly after extended grace periods. Businesses must ensure their dunning sequences remain compliant with applicable regulations.

Cost of Dunning Infrastructure

Building and maintaining a dunning system requires investment. ML-based retry optimization, card updater integrations, multi-channel notification systems, and payment processing fees on retried transactions all add cost. For smaller subscription businesses, the ROI of sophisticated dunning depends on volume: a 10% recovery improvement on $10,000 MRR saves $1,000 monthly, while the same improvement on $1 million MRR saves $100,000.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.