Webinar: Fight or flight? Alerts, disputes and the hidden costs of chargebacks – May 13th 12PM Eastern
Webinar: Fight or flight? Alerts, disputes and the hidden costs of chargebacks –
May 13th 12PM Eastern
A major driving factor in merchants’ desire to prevent fraud is the fraud monitoring programs implemented by the main credit card networks, namely the Visa Fraud Monitoring Program (VFMP) and MasterCard’s Excessive Fraud Merchant Compliance Program (EFM). These programs are designed to help companies develop plans to tackle their fraud problems, but they also tack on hefty fees to penalize merchants who don’t have their house in order.
Visa uses fraud-related chargebacks and TC40 data to decide which merchants should be placed in VFMP. An early warning is given to merchants and their acquirers when their ratio of fraud to total sales exceeds 0.65 percent and overall fraud is greater than $50,000 per month.
It should be noted that Visa only counts the first ten fraudulent transactions from a single cardholder. That means that if you have dozens of fraud chargebacks in a specific month due to one bad card, only the first ten of those transactions will count towards your fraud ratio.
Merchants are placed in VFMP when the ratio of the dollar value of fraudulent transactions to total amount of transactions exceeds 0.9 percent and total fraud is greater than $75,000 per month. When the fraud rate climbs above 1.8 percent and $250,000 in total fraud, merchants are placed in the excessive level of VFMP. You can be transferred from a standard VFMP to an excessive-risk VFMP but not vice versa. Also, merchants in high-risk Merchant Category Codes (MCCs) are automatically placed in the excessive VFMP when they exceed standard fraud levels. The only way to get out of the excessive level program is to reduce your fraud rate to compliant levels.
During the first month of both standard and excessive VFMP, the acquirer must notify the merchant that they’ve exceeded thresholds. Months two through four are the workout period. The merchant’s acquirer must begin to work with their merchant to implement a fraud remediation plan. Months five through 12 are the enforcement period. The acquirer must ensure the plan is working or make adjustments until the merchant’s fraud levels are below VFMP thresholds. After 12 months in either the standard or excessive programs, Visa may exercise their right to take away the merchant’s ability to process Visa payments.
While in VFMP, merchants will automatically receive chargebacks under reason code 10.5: fraud monitoring program for fraud-related disputes. This is even true if you use 3D Secure, which normally shifts liability to the issuer
Merchants can get out of the VFMP by staying below the standard fraud threshold of 0.9% for three consecutive months.
MasterCard uses fraud-related chargebacks and SAFE report data to determine which merchants should be placed in the EFM program. Specifically, chargebacks due to reason codes 4837 (No Cardholder Authorization) and 4863 (Cardholder Does Not Recognize — Potential Fraud) are counted. To be placed in the EFM one must have in a calendar month:
To be removed from the EFM program, a merchant must be in compliance for three consecutive months, meaning the account did not meet the criteria listed above to be flagged in the program. Once a merchant exits the EFM program, any subsequent flagging would start over at Month 1 again. While enabling 3D Secure is not a requirement of the EFM program, it is recommended to help mitigate fraud by authenticating transactions.
An ounce of prevention is worth a pound of cure. In general, a merchant should invest in anti-fraud tools to avoid being placed in a fraud monitoring program in the first place. If your fraud rate is rising dangerously close to the threshold or you’ve already breached it and need to develop a mediation plan, feel free to contact us for impartial advice on fraud solutions on the market.
Starting June 17, 2025, Stripe is rolling out a major change to how it charges merchants for disputes, and if you’re not prepared, it could get expensive fast. This post will walk you through what’s changing, why it matters, and how merchants should think about Stripe chargebacks. For more information, see Stripe’s announcement here. What’s […]
Chargeback alerts and Rapid Dispute Resolution (RDR) are important tools for merchants. Using them wisely as part of an overall chargeback management strategy is key to maintaining a good reputation with card issuers. Alerts, RDR and chargeback automation have a significant impact on merchant bottom lines. While we’ve been offering chargeback alerts and RDR for […]
Payment methods and fraud techniques are ever evolving, and that means your stack needs to evolve even faster. However, with so many technologies available, it’s hard to know what’s needed, what’s useful, and what you can do without. This article examines the essentials for any payment stack in 2025, as well as emerging technologies that […]
Chargebacks don’t just entail payment reversals for merchants, but also additional fees levied by acquirers to cover the costs of managing the chargeback process. The chargeback fee, along with the chargeback amount, is normally subtracted from the payment due to the merchant in the period when a payment dispute is filed. Many acquirers and PSPs make the […]
Travel and hospitality related friendly fraud is sky high and rising – incurring huge costs to businesses forced to devote time and money to combatting illegitimate chargebacks. This marks a crisis for an industry where mere percentage points dictate who soars high and who goes under. Fortunately, a range of tools and strategies are available […]
Visa has rolled out a new program that’s changing how merchants and acquirers are monitored for chargeback and fraud ratios. Keep reading to learn what you need to know. The new Visa Acquirer Monitoring Program (VAMP) went into effect on April 1, 2025, consolidating the Visa Dispute Monitoring Program (VDMP) and Visa Fraud Monitoring Program […]