Disputes and fraud
High-Risk Chargeback Management
Chargeback management starts before a dispute: accurate checkout terms, recognizable billing, reliable fulfillment, accessible refunds and cancellation, fraud controls, and records that connect each payment to the customer and order. A response tool can organize disputes, but it cannot repair a broken sales or fulfillment process.
Last reviewed
Decision brief
Manage the customer journey before representment
Use this guide when
You need to connect prevention, refund operations, alerts, evidence and account monitoring instead of treating disputes as isolated cases.
Root cause
Segment disputes by fraud, authorization, descriptor, fulfillment, cancellation and customer-service failure.
Intervention
Choose where authentication, review, refund, alert or customer contact can prevent escalation.
Evidence
Retain the records required for the actual product, delivery event and dispute condition.
Run one dispute ledger
- Reason, channel, product, device and customer cohorts
- Refund, alert, inquiry, chargeback and representment outcomes
- Evidence completeness, deadlines, fees and account-monitoring thresholds
Know where the merchant sits in a card dispute
A cardholder raises a dispute with the issuer. The issuer sends the dispute through the card network to the acquirer, and the acquirer or processor notifies the merchant. The transaction value may be reversed, and the merchant can respond when the applicable rules and facts allow it.
The dispute condition or reason determines the response. Fraud, nonreceipt, cancellation, duplicate processing, incorrect amount, and credit-not-processed cases require different records. A generic receipt is not enough for every case, and a response does not guarantee that the merchant will prevail.
Fix the source of disputes, not only the response queue
Classify disputes by product, offer, website, descriptor, traffic source, device, issuer country, fulfillment method, subscription cohort, and reason. Then connect them to refunds, customer contacts, delivery failures, fraud alerts, and checkout changes. A rising dispute count can be an operations problem, a marketing problem, a fraud attack, or several problems at once.
Refunds and customer service are part of dispute prevention. Clear policies, prompt cancellation, reachable support, and proactive communication about delays can prevent customers from going to their issuer when the merchant can resolve the problem directly.
- Unrecognized descriptor or unclear receipt
- Product not received, late delivery, or service not provided
- Cancellation or refund not completed as promised
- Recurring charge not expected by the customer
- Stolen credentials, account takeover, or card testing
Make the transaction recognizable and the promise deliverable
Show the merchant name, product, total price, renewal terms, delivery timing, refund policy, and cancellation method before payment. Use a billing descriptor that customers can connect to the purchase, and repeat it on the confirmation and receipt. Keep proof that the customer accepted the terms that applied to that transaction.
Do not capture a card transaction before the product or service reaches the contractually appropriate stage. Track shipping, service access, customer communications, cancellation, refunds, and partial fulfillment so the merchant can both serve the customer and answer a later dispute.
Use layered fraud controls without confusing them with proof of delivery
Device, velocity, account, payment, identity, address, and behavior checks can reduce fraudulent transactions when they are tuned to the merchant's actual traffic. EMV 3-D Secure enables data exchange between the merchant and issuer for cardholder authentication in e-commerce, but it does not resolve non-fraud disputes such as nonreceipt or cancellation.
Protect cardholder data and the systems that can affect its security under the applicable PCI DSS responsibilities. Tokenization and a hosted checkout at the payment gateway can reduce direct exposure, but the merchant must confirm its own scope with the acquirer and service providers rather than assuming outsourcing removes every obligation.
Track network monitoring and acquirer limits continuously
Card networks and acquirers monitor fraud and disputes. Visa's current Visa Acquirer Monitoring Program combines fraud and dispute activity for card-not-present transactions and includes merchant-level monitoring. Thresholds and program rules can change, so the merchant should obtain the current limits and remediation process from its acquirer or processor.
Track raw counts, transaction counts, amounts, reason categories, and the provider's contractual ratio instead of relying on one homemade percentage. Alerts and resolved pre-disputes may be treated differently under a network program. Build an internal warning level below the external limit so corrective action starts before an account is identified.
The contract can be stricter than a network program
An acquirer may set merchant limits or take action before a card-network threshold is reached. Ask which measurement, period, minimum counts, and consequences govern the account.
Respond to the reason code with transaction-specific records
The response package should address the stated dispute condition and meet the processor's deadline and format. Useful records can include order and transaction details, checkout terms, authentication results, descriptor disclosure, delivery or service-use records, customer communication, cancellation status, and proof of a completed refund.
Do not send irrelevant personal data or fabricate evidence. Accept financial responsibility when the network condition has no valid remedy or the merchant did not deliver what was promised. Feed the outcome back into checkout, fraud rules, fulfillment, and customer service rather than treating the case as finished when the response is filed.
Choose tools by the operating problem they solve
A provider may offer fraud screening, 3-D Secure, pre-dispute alerts, order-detail sharing, automated refunds, case management, or response submission. Ask which card brands, countries, reason codes, transaction types, and integrations are supported and how each service is priced.
Read the merchant agreement for chargeback fees, response deadlines, and monitoring limits. Check as well how remediation, suspension, and termination work, and whether reserve terms or settlement timing can change. Also confirm who handles disputes after the account closes and how long the merchant retains portal access and transaction records.
FAQ
Common questions
What is the difference between a dispute and a chargeback?
A dispute begins when a cardholder questions a transaction with the issuer. A chargeback is the financial reversal that can follow through the network and acquiring chain. Providers sometimes use the terms loosely, so check the case status and deadline in the portal.
Does 3-D Secure prevent every chargeback?
No. EMV 3-D Secure supports cardholder authentication for e-commerce and can affect fraud liability under applicable network rules, but it does not eliminate disputes over delivery, cancellation, refunds, product quality, or other non-fraud issues.
Should a merchant fight every chargeback?
No. Respond when the facts and network rules provide a valid remedy. Accept the dispute when the merchant owes the refund, lacks the required records, or the dispute condition has no applicable response.
What chargeback ratio is safe?
There is no permanent universal safe number. Network programs, regions, transaction types, minimum counts, and acquirer contracts differ and can change. Obtain the current measurement and action levels for the specific account and monitor below them.
Official references
- Dispute Management Guidelines for Visa Merchants (opens in a new tab)Visa
- Visa Acquirer Monitoring Program Overview (opens in a new tab)Visa
- EMV 3-D Secure (opens in a new tab)EMVCo
- PCI Data Security Standard (opens in a new tab)PCI Security Standards Council
- Mastercard Rules for Merchants (opens in a new tab)Mastercard