Process Guides

ImmiAccount Error Codes Explained: What Each Message Means and How to Fix It

ImmiAccount error codes explained: full list of common error messages — login, MFA, payment, session, document upload — what each means and how to fix it.

7 min read(1,698 words)
ImmiAccounterror codestroubleshootingHome Affairslogin errorpayment errorsession error2026
ImmiAccount Error Codes Explained: What Each Message Means and How to Fix It

ImmiAccount Error Codes Explained: What Each Message Means and How to Fix It

Updated: 18 May 2026

ImmiAccount Error Codes Explained: What Each Message Means and How to Fix It — that is what this reference covers, message by message. Unlike Microsoft or banking systems, ImmiAccount almost never surfaces numbered error codes. The Department of Home Affairs uses descriptive text strings ("Your session has expired", "Payment declined", "File too large"), and the fix depends entirely on which message you see. This page catalogues the common messages across login, MFA, payment, session, document upload and application flows, with the cause and the corrective action for each. For the full account setup walkthrough, see the parent guide: ImmiAccount Guide: How to Create and Manage Your Account.

How ImmiAccount errors actually work

ImmiAccount does not publish a numeric error-code catalogue. Errors appear as plain-English messages, either in a red banner at the top of the page or in a modal dialog. Some are user-facing (wrong password, declined card, oversized file). Others are server-side and largely opaque to the user (database lookup failures, session-store errors, payment gateway timeouts).

The errors fall into six rough categories:

  • Login & access errors — credentials, account lockouts, server unavailability
  • MFA errors — verification codes that fail, expire, or never arrive
  • Payment errors — declined cards, 3D Secure failures, expired payment sessions
  • Session & connectivity errors — timeouts, network drops, stale URLs
  • Document upload errors — file size, file type, malware flags
  • Application errors — link-application failures, permission issues, finalised applications

The taxonomy matters because the fix differs sharply by category. A "Payment declined" needs a bank call; a "Session expired" just needs a fresh login.

Login and access errors

Error message What it means How to fix
"Your username or password is incorrect" Bad credentials, Caps Lock on, or you are on a phishing site. Confirm you are at online.immi.gov.au. Toggle Caps Lock off. If unsure, use Forgot Password.
"Your account has been locked" Five consecutive failed login attempts. Wait 4 hours for the auto-unlock, or run the Forgot Password flow to reset and unlock immediately.
"We are unable to log you in at this time" Server-side; usually transient (deployment, maintenance window, load spike). Wait 30 minutes and retry. If it persists, switch browser, clear cache and cookies for homeaffairs.gov.au, and try again.
"An error has occurred" (generic) Catch-all server error; no useful detail. Retry in a fresh browser session. Clear cache. Try Chrome or Edge if you were on another browser.

If the same error appears across two browsers and a different network, treat it as a Home Affairs-side outage and check status before retrying for hours.

Multi-Factor Authentication (MFA) errors

MFA is mandatory for every ImmiAccount user in 2026, so verification-code errors are common.

  • "The verification code you entered is invalid" — either you typed it wrong, or the code expired. TOTP codes from apps like Google Authenticator typically rotate every 30 seconds and are accepted for roughly 60-90 seconds. Email codes are typically valid for 5-10 minutes. Fix: request a fresh code and enter it immediately. If you use a TOTP app, check your device clock is set to automatic — clock drift is the single most common cause.
  • "We could not send the verification code" — the email never left, or it bounced. Fix: check spam and junk folders. Allowlist homeaffairs.gov.au in your mail client. If you use a corporate or school mailbox, the email may be quarantined; switch to a personal address registered to the account.
  • "MFA setup incomplete" — you started enrolling a second factor and the session timed out before you finished. Fix: log out fully, close the browser, log back in, and complete the entire MFA setup in one sitting without switching tabs.

Payment errors

Payment errors are the highest-stakes category because the visa lodgement is not finalised until the fee clears.

  • "Payment declined" — your card issuer rejected the charge. Australian government payment gateways routinely decline cards from certain issuers and countries. Fix: call your bank, confirm the charge was declined and not paused, and authorise international AUD transactions. If the bank cleared it on their end, try a different card.
  • "Insufficient funds" — the available balance does not cover the fee plus any surcharge. Fix: top up the account or use a different card.
  • "3D Secure verification failed" — Verified by Visa, Mastercard SecureCode or Amex SafeKey failed to authenticate. Fix: ensure the card is enrolled in 3D Secure. Some banks require you to approve the transaction in their mobile app within a short window — open the app before submitting payment.
  • "Payment session has expired" — you took too long to complete the payment form. Fix: restart the payment from the application summary page. Have card details ready before starting.
  • "Payment in progress" (stuck) — the system thinks a payment is still processing. Do not retry immediately. Call your bank and confirm whether funds were actually charged. Retrying blindly is the most common cause of double charges, which then require a refund request through the Tech Support Form.

Session and connectivity errors

  • "Your session has expired" — you were inactive for more than the session timeout (typically 20-30 minutes). Fix: log in again. Save your application before stepping away; do not leave the tab idle while you gather documents.
  • "Unable to connect" or generic network errors — your connection dropped, or a corporate firewall, ad-blocker or VPN is interfering. Fix: disable VPN, switch to a mobile hotspot to isolate, and disable extensions one at a time.
  • "The page you requested could not be found" — usually a stale bookmark, an expired email link, or a URL from an old session. Fix: go to online.immi.gov.au, log in fresh, and navigate to the application from the dashboard.

Document upload errors

  • "File too large" — the file exceeds the per-document size limit (typically 5 MB). Fix: compress the PDF with a free tool such as Smallpdf or iLovePDF, or reduce image resolution to around 1500-2000 px on the long edge before re-saving.
  • "File type not supported" — accepted types are PDF, JPG and PNG. Fix: convert HEIC, DOCX, PAGES or other formats to PDF before upload. iPhone photos default to HEIC and must be converted.
  • "Document failed to upload" — generic upload failure. Fix: try a different browser; upload one document at a time rather than batch; rename the file to alphanumeric characters only (no &, #, %, brackets, or non-Latin characters); avoid spaces if the upload still fails.
  • "Virus detected" — Home Affairs scans every upload and your file tripped the scanner. Fix: re-scan locally with your own antivirus. If clean, open the document, re-save as a new PDF (which strips embedded objects), and retry. If it persists with a clean file, escalate via the Tech Support Form.

Application errors

  • "Application details cannot be verified" — almost always seen during the Link Application flow. Fix: re-enter the TRN, full name and date of birth exactly as they appear on the application confirmation. A single character mismatch in the family name will fail.
  • "This application has been finalised" — the visa has already been granted, refused or withdrawn. No action is available because the case is closed. Decision correspondence has already been sent to the email on file.
  • "You do not have permission to view this application" — you are logged into a different ImmiAccount than the one that lodged the application, or a registered migration agent lodged it without sharing visibility. Fix: log into the correct account, or link the application using the TRN from your grant or acknowledgement letter.

For the link-application walkthrough, see: ImmiAccount: Link an Existing Application.

When to escalate — and how

Escalate when the same error reproduces on two browsers, on a different network, and is not in the user-side categories above (credentials, files, cards).

For locked accounts and forgotten passwords specifically, see: ImmiAccount Password Reset and Locked Account.

FAQ

Does Home Affairs publish a numbered ImmiAccount error code list?

No. ImmiAccount uses descriptive text messages, not numbered codes. There is no public error-code reference because the system does not assign numeric IDs to user-facing errors.

Why does my ImmiAccount payment keep failing?

The three most common causes are: an international card declined by the Australian payment gateway, a 3D Secure (Verified by Visa / SecureCode) authentication that timed out in the bank app, or insufficient funds when the surcharge is added. Call your bank first to confirm whether the charge is actually being declined on their end before retrying.

How big can a document upload be on ImmiAccount?

The per-document limit is typically 5 MB. Accepted formats are PDF, JPG and PNG. Compress PDFs and reduce image resolution before upload if you hit the size cap.

What does "session expired" mean and how do I prevent it?

It means you were inactive in ImmiAccount for longer than the timeout window (typically 20-30 minutes). Prevent it by saving your application regularly, keeping the tab focused while you work, and not leaving the browser idle while you gather supporting documents.

Will an ImmiAccount error affect my visa application deadline?

Not by itself. A technical error does not extend a statutory deadline. If a system error is preventing lodgement before a deadline (such as a substantive visa expiry), document everything with screenshots and timestamps, call the Global Service Centre on 131 881, and submit the Technical Support Form the same day so Home Affairs has a contemporaneous record.

Explore

Explore

Explore