Limited Time BFCM Offer for Prevent 2.0
Limited Time BFCM Offer for Prevent 2.0
Limited Time BFCM Offer for Prevent 2.0
Limited Time BFCM Offer for Prevent 2.0
/
Disputes & Chargebacks
November 8, 2026
Nov 11, 2026

Mastercard MATCH List: Why Merchants Get Listed and How to Get Off It

White circular logo with interlocking shapes at the center surrounded by overlapping orbit-like elliptical lines and scattered blue diamond shapes.

Chargebacks?
No longer your problem.

Recover 4x more chargebacks and prevent up to 90% of incoming ones, powered by AI and a global network of 20,000+ merchants.

600+ reviews
No credit card needed.
Mastercard MATCH List: Why Merchants Get Listed and How to Get Off It

TL;DR:

  • MATCH is Mastercard's shared record of merchants terminated by acquirers for one of 11 defined reasons.
  • A listing runs five years and follows the principal owners, so a new company will not reset it.
  • Early removal needs a listing error, or for code 12, verified PCI DSS compliance backed by a certified forensic examiner.
  • The code 04 test is 1.5% of Mastercard sales and $5,000 over three months, with no minimum chargeback count.
Loading the Elevenlabs Text to Speech AudioNative Player...

The Mastercard MATCH list is a shared database of merchants that acquiring banks have terminated for specific reasons, such as excessive chargebacks or fraud. A listing stays for five years. While it stands, most processors will turn you down.

This guide covers why merchants get listed, how removal works, and how to stay off the list.

5 yearsHow long a MATCH listing stays
11MATCH reason codes in current rules
1.5% + $5,000Chargeback test for code 04
365 daysRetroactive alerts to new acquirers

What is the Mastercard MATCH list?

The MATCH list is Mastercard's database of merchants that acquirers terminated for one of 11 listed reasons, kept for five years. Acquirers search it before they approve a new merchant.

MATCH stands for Mastercard Alert to Control High-risk Merchants. Older documents say Member Alert. Mastercard now calls the product MATCH Pro. Acquirers use it to see whether another acquirer terminated a merchant, and why.

Its older name is the Terminated Merchant File, or TMF. Many people still say "TMF match list" or just "TMF" for both MATCH and Visa's list, the Visa Merchant Screening Service (VMSS). The match list in credit card processing works the same way at every acquirer: check before signing, report after terminating.

Three rules shape everything else:

  • Acquirers add the entries, not Mastercard. The bank that ends your account decides whether you meet a reason code.
  • Acquirers must search MATCH before signing you. Mastercard's MATCH Pro flow runs the inquiry before the merchant agreement is executed.
  • The record names the owners. It holds the business name, DBA, address, phone, tax ID and URL, plus each principal owner's name, address, phone and tax ID.

That last point matters. A new LLC with the same owners will still match. If the roles of banks and processors are new to you, see merchant acquirer vs payment processor.

Who puts a merchant on the MATCH list, and why?

The acquirer that terminates your merchant account puts you on the list. It must add you if the termination fits one of Mastercard's reason codes.

Mastercard's Security Rules and Procedures (August 2026) give the acquirer five calendar days to add the record. The clock starts at the earliest of three events. The acquirer decides to terminate, you give notice that you are leaving, or it learns of a reason-code issue. Other acquirers can see the record in real time.

Two details catch merchants off guard:

What are the MATCH reason codes?

MATCH uses 11 reason codes in Mastercard's current rules. Codes 04 and 05 are the ones that catch ordinary merchants, because they are pure math. You can trigger them without breaking any rule on purpose.

CodeReasonWhat it means
01Account Data CompromiseAccount data at your business was accessed or disclosed without permission and later used for fraud. This includes a common point of purchase.
03Transaction LaunderingYou processed card sales for activity your merchant agreement does not cover. See transaction laundering.
04Excessive ChargebacksMastercard chargebacks over the previous three months topped 1.5% of Mastercard sales transactions and totaled USD 5,000 or more.
05Excessive FraudFraud reached 8% of sales dollars, with 10 or more fraud transactions and USD 5,000 or more, over the previous three months.
06CoercionA sale was processed because the cardholder or a family member faced threatened or actual harm, or seizure of property.
08Questionable Merchant Audit ProgramMastercard's questionable merchant audit identified the business.
09Liquidation/InsolvencyThe business cannot, or likely cannot, meet its financial obligations.
10Violation of StandardsThe business broke Mastercard acceptance standards, such as honoring all cards or prohibited transactions.
12PCI DSS NoncomplianceThe business failed Payment Card Industry Data Security Standard requirements.
13Illegal TransactionsThe business processed illegal transactions.
14Identity TheftThe acquirer believes someone unlawfully used the identity of the business or its owners to open the account.

What changed in the 2026 MATCH rules?

Many pages still describe the older rules. Here is how Mastercard's August 2026 Security Rules differ, so you test yourself against the right numbers.

RuleOlder summariesSecurity Rules, 4 August 2026
Codes in useCodes 01 to 14, including 02 (Common Point of Purchase), 07 (Fraud Conviction) and 11 (Merchant Collusion), with 06 often shown as unused11 codes. Common point of purchase sits under 01; 07 and 11 are gone; 06 is now Coercion
Code 04 testOver 1% of Mastercard sales transactions and USD 5,000, both in the same monthOver 1.5% of Mastercard sales transactions and USD 5,000 or more, over the previous three months
Code 05 test8% fraud-to-sales dollars, 10+ fraud transactions, USD 5,000+, in one calendar monthSame thresholds, measured over the previous three months
Deadline to listStripe states 1 business day after termination5 calendar days from the earliest of three trigger events (section 11.5)

Source: Mastercard Security Rules and Procedures, Merchant Edition (4 August 2026), chapter 11 and Table 11.4. Winning or reversing chargebacks later does not change whether you met the code 04 test.

For code 05, the fix starts with ecommerce fraud prevention. For code 12, it starts with PCI DSS compliance.

How long do you stay on the MATCH list?

A MATCH listing lasts five years. MATCH Pro searches entries added in the past five years, and Stripe states listings stay active for five years.

Fixing the problem does not shorten that clock, except for code 12. Lower chargebacks, a new fraud tool, or paid-off fees do not remove the record.

One more timing trap: MATCH Pro sends retroactive alerts. Say a new acquirer screens you and finds nothing. If your old acquirer lists you within 365 days, the new acquirer gets a retroactive alert, shown for 30 days in MATCH Pro. A backup account opened during a wind-down can still be reviewed and closed.

What does a MATCH listing do to getting a new merchant account?

A listing shuts most mainstream doors. Every acquirer must check MATCH, so the record shows up at each application.

Specialist providers may still approve you, with conditions. Expect higher pricing, a reserve that holds part of each payout, volume caps, and longer contracts. Our guides to getting a high-risk merchant account and choosing a high-risk payment service provider cover the options.

Underwriters read the reason code first. A chargeback code points to an operating problem you can show you fixed. Conduct codes such as laundering, coercion or illegal transactions point to intent, and far fewer providers accept them.

Not sure where you stand? Use this table to place yourself.

StatusSignalsWhat to do now
ListedTermination letter citing a MATCH code; repeated declines that mention MATCH or TMF.Confirm the code and the listing acquirer. Check it for errors. Apply only to providers that accept your code, and disclose it up front.
At riskMastercard chargebacks near 1.5% of sales and near $5,000; a monitoring program notice; new reserves or payout delays.Cut new chargebacks within 30 days. Send your acquirer a written plan before it decides to terminate.
CleanRatios well under every network line; no notices; stable payouts.Track ratios weekly by network and keep alerts and fraud screening on.

How do you get off the MATCH list?

You can get off the MATCH list early only if the listing was an error or, for code 12, once you are PCI DSS compliant. Every other listing runs its five years. The acquirer, not Mastercard, is responsible for a listing's accuracy (section 11.4), so an error claim starts with the acquirer that listed you.

Use this table to see which route fits your case. It follows section 11.13 of Mastercard's Security Rules (August 2026).

Your situationCan it come off early?What the request needs
Wrong code, wrong data, or you never met the testYes, as a listing errorThe listing acquirer reports the error to Mastercard. Bring statements and chargeback counts that disprove the code.
Code 04 or 05, and the math holdsNoWait out the five years. Apply only to providers that accept the code.
Code 12, and you are now PCI DSS compliantYesThe acquirer's attestation of compliance plus a letter or certificate of validation from a Mastercard certified forensic examiner. If the acquirer is unwilling or unable, you can submit the request yourself.
Code 14, and you are the identity theft victimNot unless it was entered in errorKeep a police or identity theft report to show new acquirers. Stripe says it may consider this kind of proof as an extenuating circumstance.
Conduct codes (03, 06, 10, 13) that are accurateNoDisclose the code. Few providers accept these listings.

Here is how to get off the MATCH list when you think the entry is wrong:

  1. Confirm the listing and codeAsk the terminating acquirer in writing for the reason code and listing date.
  2. Test the code against your dataFor code 04, recount Mastercard chargebacks and sales for the three months cited. Both the 1.5% and $5,000 tests must be true.
  3. Build the fileCollect the evidence in the checklist below, organized by month.
  4. Send a correction requestWrite to the listing acquirer. Name the code, the error, and the proof.
  5. Escalate if ignoredA payments attorney can turn a request into a formal demand.
  6. Check Visa separatelyClearing MATCH does not clear VMSS.

Keep this evidence for a removal request:

  • Termination letter and every email about the decision
  • Your merchant agreement, including the termination clause
  • Processing statements for the months the acquirer cited
  • A chargeback report by network, with dates, amounts and reason codes
  • Total Mastercard sales transaction count for those months
  • The acquirer's PCI DSS attestation and a forensic examiner's validation letter, for code 12
  • A police or identity theft report, for code 14

Is MATCH the same as Visa's VMSS?

No. VMSS is Visa's own list with its own codes and thresholds. Both last five years.

PointMastercard MATCHVisa VMSS
Chargeback code04: over 1.5% of sales transactions and $5,000, previous three months22: 1,000 disputes and a 1.8% dispute-to-sales amount ratio in a month
Fraud code05: 8% fraud-to-sales dollars, 10+ fraud transactions, $5,000+, previous three months21: $250,000 fraud and a 1.8% fraud-to-sales amount ratio in a month
Retention5 years5 years
Early removalListing error, or code 12 after verified PCI complianceListing error only

Sources: Mastercard Security Rules and Procedures for MATCH, and Stripe, Terminated merchant files for VMSS. Note that the Visa codes also require that the merchant did not adequately remediate.

What should you do if you are already on the MATCH list?

Keep selling while you fix the cause. Pick a provider that accepts your code, then prove clean months. This 90-day plan keeps the work in order.

  1. Days 1 to 14: diagnoseConfirm the code, recompute the month, and start the evidence file. Pause any offer that drives disputes, such as unclear trials.
  2. Days 15 to 45: fix and applyFix the top chargeback causes: billing descriptor, cancellation flow, delivery proof, fraud screening. Turn on chargeback alerts. Apply to high-risk providers with your plan attached.
  3. Days 46 to 90: prove itReport ratios weekly to your new provider. Keep refunds fast. Ask for a reserve review once you have clean months on record.

Two cautions. Do not hide the listing on an application; the inquiry will find it. And do not open extra accounts, entities or merchant IDs to spread volume under the thresholds. MATCH screens owners, and the move can breach your merchant agreement.

{{cta}}

What chargeback ratio puts you on the MATCH list?

Code 04 applies when Mastercard chargebacks top 1.5% of Mastercard sales and total USD 5,000 or more over the previous three months. Your acquirer must also terminate you. There is no minimum chargeback count.

Most merchants pass through network monitoring programs first. Fines grow each month until the acquirer stops absorbing the risk and ends the account. Mastercard's Excessive Chargeback Merchant (ECM) tier needs 100 chargebacks in a month. So a smaller merchant can meet the code 04 test without ever getting an ECM notice.

The early-warning ladder

  1. Your own triggerSet an internal alarm well below 1.5%, for example 0.5% (illustrative). This is the cheapest place to act.
  2. Over 1.5% and $5,000 (Mastercard, three months)Meets the MATCH code 04 test if your acquirer terminates you.
  3. Visa VAMP excessive1.5% VAMP ratio with at least 1,500 disputes plus fraud reports in a month in the US, Canada, EU, AP and LAC; 2.2% in CEMEA.
  4. Mastercard ECM100 to 299 chargebacks and a 1.5% to 2.99% ratio. Fines start in month 2. Mastercard plans to fold this program into GMAP on April 1, 2027.
  5. Mastercard HECM300+ chargebacks and a 3% ratio. Fines climb faster.
  6. Termination and MATCHThe acquirer ends the account and lists you for five years.

Sources: Stripe monitoring programs, Braintree on the Mastercard Excessive Chargeback Program, and the Visa VAMP fact sheet. For full program detail, read our guides to chargeback thresholds, Visa VAMP and how to avoid Mastercard chargeback monitoring programs.

The ratio math, side by side

Each test counts differently. Here is one illustrative merchant: 3,000 Mastercard sales and 50 Mastercard chargebacks worth $6,000 each month, steady from August to October.

TestFormulaIllustrative result
MATCH code 04Chargebacks over three months vs Mastercard sales, plus a $5,000 total50 / 3,000 = 1.67% a month, and $18,000 in total. Qualifies if terminated.
Mastercard ECMOctober chargebacks / September sales, plus a 100-chargeback floor50 / 3,000 = 1.67%, but only 50 chargebacks. No ECM notice.
Visa VAMPVisa disputes plus fraud reports / Visa sales, same monthSeparate count. Run it on your Visa traffic only.

This merchant gets no Mastercard warning at all, yet meets the MATCH code 04 test. That is why you should track the code 04 test yourself. Our page on chargeback threshold limits explains what a monitoring notice asks for.

Rules are also changing. Mastercard has announced a revived Global Merchant Audit Program (GMAP) to replace the Acquirer Chargeback Monitoring Program on April 1, 2027. It adds High Dispute and Excessive Dispute merchant tiers. Checkout.com's notice of August 19, 2026 confirms that date and says thresholds will follow.

The August 2026 Security Rules still list GMAP as "suspended until further notice." That note covers the older, fraud-focused GMAP, not the 2027 program. As of November 10, 2026, no acquirer notice we found moves the April 1, 2027 date.

How do you avoid the MATCH list?

Keep Mastercard chargebacks under the code 04 line every month, and act the moment the trend turns. These steps do the most work:

  • Track each formula weekly. Count by network, by month, with the right denominator. A monthly check is too late.
  • Stop disputes before they become chargebacks. Chargeback alerts let you refund before a chargeback is filed. Visa excludes disputes resolved through pre-dispute products from the VAMP count.
  • Fix the top causes. A clear billing descriptor, easy cancellation and fast refunds cut "not recognized" and "canceled" disputes. Our steps to reduce your chargeback ratio go deeper.
  • Screen orders for fraud before you ship. This keeps code 05 out of reach.
  • Stay PCI compliant. Code 12 is avoidable paperwork.
  • Keep your business coded correctly. Make sure your merchant category code matches what you sell. Miscoding a high-risk line can end in termination.
  • Talk to your acquirer early. A written plan, sent before a termination decision, gives the bank a reason to keep you. Stripe even offers a remediation template.
  • Know your platform's limits. Platforms set their own risk rules on top of network ones; see Stripe high-risk businesses.

{{cta}}

Frequently Asked Questions

How do I check if I am on the MATCH list?

You cannot search MATCH yourself; only acquirers have access. Ask the acquirer that terminated you for the code and date. A high-risk provider's application will also run an inquiry.

How long does a MATCH listing last?

Five years from the listing. Early removal is possible only for a listing error, or for code 12 after verified PCI DSS compliance.

Can I get off the MATCH list by winning or repaying chargebacks?

No. Code 04 is based on the period you were measured. Winning chargebacks later or lowering your ratio does not change that record.

Can a lawyer get me off the MATCH list?

A lawyer can press the listing acquirer to fix an error. No one can remove an accurate listing early. Mastercard allows early removal only for errors and for code 12 after verified PCI DSS compliance.

Is the TMF the same as the MATCH list?

TMF, the Terminated Merchant File, is the older name for MATCH. People also use "TMF" loosely to cover Visa's VMSS, which is a separate list.

Can I get a merchant account while on the MATCH list?

Sometimes. Specialist high-risk providers may approve a code 04 listing with reserves, higher fees and volume limits. Conduct codes are much harder to place.

Does opening a new company remove a MATCH listing?

No. The record includes principal owners' names, addresses and tax IDs, so a new entity with the same owners will still match.

What is the difference between MATCH and Mastercard ECM?

ECM is a monitoring program with monthly fines while you still process. MATCH is the record created after an acquirer terminates you. Both use a 1.5% line. Code 04 looks back three months and needs USD 5,000 in chargebacks, while ECM needs 100 chargebacks in a month.

Last reviewed: November 10, 2026.

Chargeflow's Products

Resolve Disputes Before They Become Chargebacks

Chargeflow Alerts uses Verifi, Ethoca, and the Chargeflow Network to deflect card disputes before they become chargebacks.

SHARE THIS ARTICLE
White circular logo with interlocking shapes at the center surrounded by overlapping orbit-like elliptical lines and scattered blue diamond shapes.

Chargebacks?
No longer your problem.

Recover 4x more chargebacks and prevent up to 90% of incoming ones, powered by AI and a global network of 20,000 merchants.

600+ reviews
No credit card needed.
subscribe

The latest chargebacks, fraud, and ecommerce content, in your inbox. Every week.

Sign up now and never miss out the latest trends!
By providing your email you're agreeing to our Terms of Service and Privacy Notice
Diagram with dashed and curved lines forming segmented arcs highlighted by three blue diamond markers on the left side.Abstract circular grid design with blue diamond markers on a half-black, half-white background.