Three wrong PINs and the card locks. Whoever is holding it either forgot the PIN — or never knew it.
No retry until the cardholder resets the PIN with their bank. Suggest contactless/online where PIN isn't required, within limits.
A hard decline: the issuer's answer is final. Retrying won't change it, and it inflates your decline rate — networks watch that number.