Chargeback Risk

Chargeback risk is the risk that card payments a business has already accepted are later reversed through the card network's dispute process, costing it the sale, the goods, fees and, if disputes become frequent, its ability to accept cards at all. It is carried mainly by merchants, but also by the acquirers, payment facilitators and other payment service providers that sponsor them, because they must cover chargebacks a merchant cannot pay.

A chargeback is the forced reversal itself, started by the cardholder's card issuer under the rules of the card networks. Chargeback risk is the business exposure that follows from it. It is part of wider payment risk and is closely linked to payment fraud, customer service and how clearly a merchant describes and bills its products.

Imagine selling things at a market and accepting IOUs that the customer's bank promises to honour. Weeks later, the bank can tear up an IOU if the customer says the goods never arrived, were not as described, or that someone else used their name. You lose the money and often the goods, and you pay a handling fee on top.

If this happens now and then, it is a cost of doing business. If it happens a lot, the market organisers start watching you, charge you extra and may eventually ban you from taking IOUs. Card payments work in much the same way, which is why businesses that sell online or deliver later pay close attention to how many of their sales come back.

• True fraud. A stolen card or card details are used, usually in card-not-present sales, and the real cardholder disputes the charge.
• First-party or "friendly" fraud. The genuine cardholder made the purchase but disputes it anyway, sometimes by mistake, sometimes to get money back while keeping the goods.
• Merchant errors. Duplicate charges, wrong amounts, slow refund processing, or a confusing billing descriptor that the customer does not recognise on a statement.
• Service problems. Goods not delivered, not as described, or subscriptions that are hard to cancel.
• Future-delivery exposure. Travel, events and pre-orders paid well before delivery can generate large waves of chargebacks if the merchant fails, which is a major risk for acquirers.

The basic measure is the chargeback ratio:

• $C$ is the number of chargebacks received in a period, usually a month.
• $T$ is the number of card transactions in the comparison period, which each network defines in its own rules.

Worked example: a merchant with 10,000 card sales in a month receives 150 chargebacks. Its ratio is $150 \div 10{,}000 \times 100 = 1.5\%$. At that level it would reach the entry thresholds of the network monitoring programmes described below.

Card networks watch merchants through these programmes:

• Visa. The Visa Acquirer Monitoring Program (VAMP), launched in April 2025 with enforcement from October 2025, replaced earlier separate fraud and dispute programmes. It combines reported fraud and disputes into one ratio measured against settled card-not-present transactions. The "excessive" merchant threshold was 2.2% at launch and fell to 1.5% from 1 April 2026 in regions including the US, Canada, Europe and Asia Pacific, for merchants with at least 1,500 fraud and dispute cases in a month.
• Mastercard. Its Excessive Chargeback Program flags a merchant at 100 or more chargebacks in a month and a ratio of 1.5% or more, with a higher tier at 300 chargebacks and 3%.

Merchants in these programmes face fines passed on by their acquirer, required remediation plans and, if problems persist, termination. A terminated merchant may be placed on Mastercard's MATCH list, which other acquirers check, making it hard to open a new merchant account. Thresholds and fees change often, so merchants should confirm current figures with their acquirer.

• Authentication. Using 3-D Secure on online card payments generally shifts liability for fraud-coded chargebacks from the merchant to the issuer, and in Europe supports strong customer authentication.
• Fraud screening. Rules, scoring and velocity checking to block stolen cards and card testing fraud.
• Clear billing. Recognisable descriptors, receipts and easy cancellation, which cut "I don't recognise this" disputes.
• Fast refunds and alerts. Refunding when a customer complains, and joining issuer alert or pre-dispute services, can stop a dispute before it becomes a chargeback.
• Representment. Fighting invalid chargebacks with evidence through chargeback representment; Visa's Compelling Evidence 3.0 rules, in force since April 2023, let merchants use records of earlier undisputed purchases by the same customer against certain friendly-fraud claims.
• Acquirer controls. Underwriting by merchant category, rolling or fixed reserve accounts, delayed settlement and volume caps, especially for a high-risk merchant.

When a chargeback is upheld, the issuer recovers the money from the acquirer, which debits the merchant. If the merchant has closed or cannot pay, the acquirer absorbs the loss, which is why acquirers treat chargeback exposure as a form of credit risk and price it into the merchant discount rate. Chargebacks are only one route to a refund: the wider payment dispute process also covers bank transfers and wallets, where consumer protections differ, for example under US Regulation E for debit and electronic transfers.

• Visa Core Rules and Visa Product and Service Rules