Handle the return; it isn't a refund
The receiving bank refused the debit and pulled the money back. There's nothing for you to undo.
Your answers so far
Choose one
What to build
Record the return code and reason the transaction carries, and mark the order unpaid. Don't send a refund: the bank already took the funds back, and a returned debit no longer offers one. When you still need the money, the next step is a new debit once you have account details that work.
What this means for PCI
This is guidance rather than a compliance determination. Which questionnaire you are eligible for depends on your full environment, so confirm it with your QSA or your acquirer before you rely on it.
Worth knowing
- A return can arrive days after the debit reported as settled. That's a late return, and it's normal for ACH.
- Subscribe to Transaction.Returned so a return reaches your systems without anyone checking a screen.
- Drive a return in the sandbox before you go live, rather than waiting days for a real one.