AMEX CID Policy: What Merchants Need to Know About CNP Chargebacks

Since April 2024, American Express no longer issues fraud chargebacks on authorized card-not-present transactions just because the Card Identification Number (CID) does not match. Before this change, a CID mismatch on an otherwise legitimate order still left the merchant exposed if the transaction later turned out to be fraudulent.

This guide covers what the policy actually changed, how liability shifted from merchants to Amex, how it compares to Visa and Mastercard, and whether it still holds up in 2026.

Policy Change Overview

As of April 2024, AMEX no longer issues fraud chargebacks for authorized CNP transactions when the CID doesn’t match the records. For the full details, refer to the AMEX factsheet.

Background: The Previous CNP Transaction Process

Imagine the journey of a CNP transaction. Your customer is miles away, perhaps sipping coffee in a cozy café, while their order zooms through cyberspace to your server. The CID, a four-digit security code on the front of the card, acts as a gatekeeper, ensuring the person making the purchase is indeed the cardholder. Previously, if the CID didn’t match, merchants had to ask customers to re-enter it. This extra step often led to frustration, abandoned carts, and lost sales. Worse yet, if the transaction went through and turned out to be fraudulent, the merchant bore the brunt of the chargeback under Amex’s chargeback reason codes for card-not-present disputes.

How the Policy Works

A CNP authorization response still tells you whether the transaction is approved and whether the CID matches. The difference now: you can proceed with an approved transaction even when the CID doesn’t match, without risking a fraud chargeback on it. Liability for that specific scenario shifted from the merchant to Amex.

Benefits of the Policy Change

1. Fraud Chargeback Protection

Imagine not having to constantly look over your shoulder for fraud chargebacks. With this new protection, you can confidently submit transactions with CID mismatches, knowing you’re shielded from the financial and administrative headaches of chargeback disputes.

2. Increased Sales Potential

Remember the sales you’ve lost due to those dreaded CID re-entry prompts? With this policy, those abandoned carts could transform into completed sales, boosting your profitability. Your customers will appreciate the seamless experience and may be more likely to return.

3. Improved Customer Experience

Think of a checkout process so smooth, that your customers glide through it effortlessly. No frustrating re-entries and no abandoned carts, just customers who complete checkout and are more likely to come back.

How Amex’s CID Policy Compares to Visa and Mastercard

Amex is the outlier here. Visa and Mastercard still expect merchants to treat a CID/CVV mismatch as a risk signal, since neither network has published a comparable liability shift.

Post-Policy Implementation: Steps for Merchants

Updating Payment Technology:

Update your point-of-sale or checkout systems to accept CID mismatches on approved transactions instead of prompting for re-entry.

Ensuring Compliance:

Reach out to your point-of-sale providers or payment processors to confirm how they handle Amex authorization responses. This exemption only covers CID mismatches, not every type of dispute, reason code C08 and other Amex fraud codes still apply where the transaction itself was never authorized.

Previous vs. Current and Future Liability

Previous Liability (Before April 2024)

Remember the days when a CID mismatch meant you were on the hook for fraud chargebacks? The financial risk and administrative load were yours to bear.

Current and Future Liability (Post-April 2024)

From April 2024 onward, Amex shoulders the responsibility for these chargebacks instead of the merchant, as long as the transaction was authorized. That removes one recurring source of chargebacks tied to authorized orders.

How Chargeflow Can Help

Enter Chargeflow, your ally in navigating these changes. Chargeflow’s tools and services are designed to help you adapt seamlessly:

1. Automated Dispute Management: Minimize the risk and hassle of chargeback disputes. Chargeflow’s automated system reduces the manual effort required, ensuring disputes are handled swiftly and efficiently, saving you time and resources.
2. Advanced Fraud Detection and Prevention: Stay ahead of fraudsters with cutting-edge mechanisms. Our advanced fraud detection tools help identify suspicious activities early, protecting your business from unauthorized transactions and reducing the risk of chargebacks.
3. Real-Time Fraud Monitoring: Track fraud trends and chargeback patterns as they happen instead of after the dispute lands, so you can adjust your fraud prevention strategy before it costs you more orders.
4. Seamless Integration: Easily integrate Chargeflow with your already existing payment systems, for a smooth transition from your traditional approach without interruption of your performance. Such integration allows your to enhance your processes while focusing on your core business activities. 
5. Higher Dispute Win Rates: Chargeflow builds evidence tailored to each Amex reason code, which improves win rates on the disputes that do still land, including ones unrelated to CID mismatches.

With Chargeflow's powerful suite of features you can easily manage the new AMEX policy change and protect your business without disrupting your current operations.

Frequently Asked Questions About Amex’s CID Policy

Is Amex’s CID policy still in effect in 2026?

Yes. Amex’s factsheet describes the liability shift as a standing policy with no stated end date, and Amex’s most recent merchant regulations updates have not reversed or modified it.

What is CID and why did a mismatch used to cause chargebacks?

CID is the four-digit code on the front of an Amex card. Before April 2024, a mismatch on an approved order still left the merchant liable if that order later turned out to be fraudulent, even though the transaction had already been authorized.

Does this exemption apply to Visa or Mastercard transactions?

No. This is an Amex-specific policy. Visa and Mastercard have not published an equivalent blanket exemption for CVV mismatches, see the comparison above.

Does the CID exemption cover every type of Amex dispute?

No. It only covers fraud chargebacks tied to a CID mismatch on an authorized transaction. Other CNP chargebacks, including ones where the cardholder disputes the transaction outright, still apply.

What should merchants do to stay compliant?

Confirm with your payment processor that CID mismatches no longer trigger manual re-entry prompts, then focus fraud screening on the signals that still matter, order value, shipping mismatches, and device or account risk.

Handle the Amex Disputes This Policy Does Not Cover

Amex’s CID exemption closes one narrow gap. Every other Amex chargeback reason code, and every dispute on Visa or Mastercard, still needs a real response.

Chargeflow automates that response: it builds evidence tailored to the reason code behind each dispute, submits it, and tracks the outcome, so your team is not assembling packets by hand for the cases this policy does not touch.

Here is what that gets you:

• Save time: evidence gathering and submission run automatically for every dispute, not just Amex CNP cases.
• Higher win rate: responses are built around the specific reason code behind each dispute.
• Lower costs: fewer lost disputes and less manual review work reduce overhead.
• Fewer repeat disputes: Chargeflow surfaces the patterns behind your chargebacks so you can close the gaps fraud keeps coming through.

If Amex’s CID exemption only solved part of your dispute load, see how Chargeflow handles the rest.