Oct 18, 2026

Chargeback Rules: The Complete Merchant Guide

Chargebacks?
No longer your problem.

Recover 4x more chargebacks and prevent up to 90% of incoming ones, powered by AI and a global network of 20,000 merchants.

600+ reviews

start for free

No credit card needed.

TL;DR:

Most card networks give cardholders about 120 days to file, and Visa and Mastercard allow up to 540 days only in specified cases.
Your provider’s response deadline is far shorter than the filing window, often 7 to 21 days.
Visa’s VAMP Excessive merchant threshold fell to 1.5% on April 1, 2026, in the U.S., Canada, the EU, and Asia Pacific.
Mastercard ECM starts at 100 chargebacks and a 1.5% ratio, with fines from month two.
Winning a dispute does not remove it from Visa or Mastercard monitoring counts.

Key Takeaways:

Every network sorts chargebacks into reason-code categories, such as Visa's fraud, authorization, processing error and consumer dispute groups.
Four rule layers decide every dispute: consumer law, network rules, acquirer terms, and your own policies.
The 540-day cap applies to specific conditions such as Visa 13.1 and never extends your response deadline.
Regulation Z and Regulation E give cardholders 60-day notice windows, but network chargebacks can still arrive later.
Mastercard’s Global Merchant Audit Program replaces ACMP on April 1, 2027, and scores fraud and non-fraud disputes together.

Explore with AI

Open in ChatGPT

Open in Claude

Open in Gemini

Google Preferred Source

Chargeback rules are the card network requirements, consumer laws and acquirer terms that decide when a cardholder can dispute a card payment, which reasons qualify, and what evidence can reverse the dispute.

Visa, Mastercard, American Express and Discover each publish their own rulebook. Most give cardholders about 120 days to file, and Visa and Mastercard allow up to 540 days in specified cases.

The stakes keep rising: Mastercard projects 286 million chargebacks worldwide in 2026 and a global chargeback cost of $36.9 billion in 2026, growing to $46.1 billion in 2029 (Mastercard, updated June 2026, research by Datos Insights).

Quick orientationChoose the rule question you need to answer

Who Sets and Applies Chargeback Rules?

Four rule layers apply to every dispute:

Law sets the cardholder’s minimum rights.
The card network sets the dispute conditions and time limits.
Your acquirer or payment service provider sets your working deadline and file format.
Your own policies supply much of the evidence.

The issuer applies these layers when it decides the case. If you need the fundamentals first, start with what is a chargeback and the chargeback vs dispute vs refund vs representment glossary.

Rule layer	Who sets it	What it controls	Where merchants feel it
Consumer law	Regulators (in the U.S., Regulation Z for credit and Regulation E for debit)	Cardholder notice periods, liability caps, issuer investigation timing	Indirectly: law protects the cardholder, the network rules decide your liability
Network rules	Visa, Mastercard, American Express, Discover	Dispute conditions, filing limits, evidence standards, escalation stages, monitoring programs	Which disputes are valid against you and how you can challenge them
Acquirer or provider terms	Your acquirer, processor, or PSP	Your response deadline, upload format, fees, reserve and termination rights	The actual due date and channel on each case notice
Merchant policies	You	Refund, cancellation, delivery, and descriptor practices	The records that become your evidence

A useful internal case record keeps these roles distinct. Write down the network, processor, reason code, case stage, deadline and owner. Do not treat one processor’s notice as a rule for every card network.

Find the Rules for Your Card Network

Choose the network first, then use the case instructions to confirm your response channel and due date. The table puts each network's filing window next to one acquirer's merchant response window. Your working deadline is much shorter than the cardholder's.

Network	Primary reference	Typical cardholder filing window	Example merchant response window (Adyen)	Chargeflow guide
Visa	Visa Core Rules and Visa Product and Service Rules	120 days; up to 540 days in specified cases	9 days for disputes on payments processed locally in the U.S. and Canada (from July 21, 2025); 18 days elsewhere	Visa rules, fees and deadlines
Mastercard	Mastercard Chargeback Guide, Merchant Edition	120 days; up to 540 days in specified cases	40 days	Mastercard chargeback guide
American Express	Amex dispute reference guide	120 days	14 days (inquiries also 14 days)	Amex chargebacks
Discover	Current Discover instructions supplied through your acquirer or provider	120 days	25 days (inquiries 18 days)	Discover chargebacks

The response column comes from Adyen’s dispute timeframes documentation and count calendar days from the chargeback notice. Other providers set different cutoffs, so treat the column as an example, not a rule for your account.

For code lookup, use the reason-code directory or the network guides to Visa chargeback reason codes, Mastercard chargeback reason codes, American Express chargeback reason codes, and Discover chargeback reason codes. For an unresolved escalation, use the arbitration guide, then reconcile the result with chargeback accounting.

Chargeback Eligibility Rules: When a Cardholder Can File

A chargeback only counts when it meets the network's rules. The issuer should check them before it files. If a case fails them, you can push back and win.

A cardholder can usually file a chargeback only when:

The claim fits one of the network's dispute conditions or reason codes.
It is filed inside the window, usually 120 days and never more than 540 days.
For consumer disputes such as non-receipt or quality, the cardholder first tried to resolve it with the merchant.
The merchant has not already credited the same amount. See chargeback vs refund for why a second credit is a double loss.
No liability shift protects the sale, such as 3-D Secure on a fraud claim.

When a case fails one of these tests, say so in your response and attach the proof. Cardholder-side rules are explained in chargebacks vs refunds.

Chargeback Reason Code Categories by Network

Each network sorts chargebacks into a few groups. The group tells you which rules apply and what proof the issuer will take.

Network	Categories	Example codes
Visa	10 Fraud, 11 Authorization, 12 Processing Errors, 13 Consumer Disputes	10.4 card-absent fraud, 12.6 duplicate processing, 13.1 merchandise or services not received
Mastercard	Fraud, Authorization, Point-of-Interaction Errors, Cardholder Dispute	4837 no cardholder authorization, 4808 authorization-related, 4834 point-of-interaction error, 4853 cardholder dispute
American Express	A Authorization, C Card Member Disputes, F Fraud, FR Fraud Full Recourse, M Miscellaneous, P Processing Errors, R Inquiry	F29 card not present, C08 goods or services not received, P08 duplicate charge
Discover	Letter codes for disputes and numeric codes, with UA codes for fraud	UA02 fraud card not present, RG non-receipt of goods or services, DP duplicate processing

Mastercard retired reason code 4859 and folded those cases into other codes, so use the code on your notice, not an old list. The network guides below list every code and what proof it needs.

Choose Evidence by the Disputed Issue

Your first task is to identify what the cardholder is contesting. Use the chargeback reason code as the starting point, then read the actual allegation.

Follow the current case and provider requirements

Choose evidence for the disputed issue

Non-receipt

Non-receipt: line up shipping and delivery records for the order and the recipient.

Product or service description

Product or service description: keep the offer shown at purchase and records about the claimed mismatch.

Cancellation

Cancellation: compare when the customer asked to cancel with when you billed and served them.

Credit not processed

Credit not processed: match the promised credit to the refund record and the related messages.

Unauthorized purchase

Unauthorized purchase: collect proof that the cardholder authorized or took part in the purchase, and check whether a liability shift applies.

Do not throw out delivery records just because the case is about fraud. Whether they help depends on the condition and your other evidence.

For Visa card-absent fraud disputes (condition 10.4), Compelling Evidence 3.0 lets you point to the cardholder’s earlier undisputed purchases, and Stripe notes that CE 3.0 eligibility typically translates to a significantly higher likelihood of overturning the dispute. If you suspect friendly fraud, explain the records rather than accusing the customer without support.

Create an attachment index with one line on what each record shows, such as a message that confirms receipt or asks to cancel.

If money already went back to the customer, confirm whether it settled as a refund or a reversal before you argue credit was processed. A chargeback response template keeps the rebuttal letter consistent from case to case.

The 540-Day Rule and Other Filing Limits

Filing limits are rules about the cardholder, not about you. Your own deadline is much shorter: Stripe’s response guidance gives merchants 7 to 21 days in most cases, allows one submission, and treats a missed deadline as a loss.

The 540-day figure is an outer cap, not a standard window. Visa’s dispute rule language for Dispute Condition 13.1 (merchandise or services not received) works like this:

The issuer must file within 120 calendar days of the last date the cardholder expected the goods or services.
It can never file more than 540 calendar days after the transaction processing date.

Mastercard has a similar 540-day cap for some cases, such as a service that stopped partway. Neither cap extends your own response deadline.

Record both sources for every case so the longer network number is never copied into your response task:

Verification field	What to record
Network source	Document title, edition or effective date, dispute condition, and region.
Provider source	Case ID, stage, due date and timezone, channel, file requirements, and retrieval date.
Internal control	Assigned owner, evidence cutoff set before the provider deadline, and final submission confirmation.

A saved draft is not a submission receipt. This page covers the rules; for every deadline by network and processor, including Stripe, PayPal and Shopify, see chargeback time limits.

What Changed in Chargeback Rules From 2025 to 2027

Network rules change several times a year. Most recent changes tighten monitoring, not the dispute conditions. These dated changes affect merchant planning now:

Effective date	Network	Change	What to do
June 1, 2025	Visa	Updated VAMP thresholds took effect, with the advisory period ending September 30, 2025	Reconcile your own fraud-plus-dispute count with your acquirer’s monthly VAMP report
July 21, 2025	Visa (as applied by Adyen)	Merchant response window for disputes on payments processed locally in the U.S. and Canada set at 9 days, versus 18 days elsewhere	Shorten internal evidence cutoffs for domestic North American Visa cases
April 1, 2026	Visa	VAMP Excessive merchant threshold fell from 2.2% to 1.5% in Asia Pacific, Canada, the EU, and the U.S.; Latin America and the Caribbean was already at 1.5%, while CEMEA stays at 2.2%	Recalculate headroom against 1.5% and the 1,500 monthly count
October 2026	Visa	Merchant Elevated Risk Program (MERP) applies to businesses accepting Visa in Asia Pacific, per Stripe’s monitoring documentation; Visa does not publish its thresholds	Watch early declines, fraud, and disputes closely on new accounts or product lines
April 1, 2027	Mastercard	The Global Merchant Audit Program (GMAP) replaces ACMP and scores fraud and non-fraud disputes together	Track fraud and non-fraud chargebacks in one Mastercard view

Understand Monitoring Separately From Representment

Winning a dispute is not the same as stopping one. Monitoring programs count a dispute when it arrives, win or lose. A recovery report does not prove your monitoring ratio has fallen.

Program	What it counts	Entry thresholds (monthly)	Consequence
Visa VAMP (Excessive merchant)	Fraud reports (TC40) plus disputes (TC15), divided by settled transactions	1.5% and 1,500 or more fraud reports and disputes in AP, Canada, EU, U.S., and LAC; 2.2%, 150 or more, and at least USD 75,000 in CEMEA	Visa fees and acquirer remediation requirements
Mastercard ECM	All first-presentment chargebacks, any reason code, against the previous month’s transactions	100 to 299 chargebacks and a 1.5% to 2.99% ratio	Fines start in month two at USD 1,000 and escalate to USD 100,000 from month 19
Mastercard HECM	Same as ECM	300 or more chargebacks and a ratio of 3% or more	Fines start in month two and escalate to USD 200,000 from month 19
Mastercard EFM	Fraud chargebacks (4837, 4863) on card-not-present e-commerce payments	1,000 or more e-commerce payments, USD 50,000 or more fraud volume, a 0.50% or higher fraud ratio, and low 3-D Secure use	Fines from month two; EFM takes precedence when ECM also triggers

Sources: Visa’s VAMP fact sheet for VAMP and Stripe’s monitoring program documentation for the Mastercard programs.

Mastercard removes a merchant from ECM or HECM after three months in a row below the threshold. For every network’s chargeback threshold limits in one place, including Amex and Discover, see the dedicated guide.

Ask your acquirer which region, exclusions and reporting period apply to you. The VAMP guide explains the Visa program, and Mastercard monitoring needs its own review because it uses a separate metric.

Use chargeback alerts to resolve cases early where you can. Visa excludes disputes resolved through pre-dispute products from the VAMP count. Sending evidence on a filed dispute does not remove it from monitoring.

Where Consumer Law Ends and Network Rules Begin

In the U.S., federal law gives cardholders a right to dispute with their issuer. It does not decide whether the merchant bears the loss. That comes from network rules and your merchant agreement, and network filing windows usually run longer than the legal notice periods.

Rule	Applies to	Cardholder notice window	Liability cap or claim limit	Issuer timing
Regulation Z (Fair Credit Billing Act)	Credit cards	60 days after the first statement showing the error	USD 50 for unauthorized use; quality claims generally need a purchase over USD 50 in the same state or within 100 miles	Acknowledge within 30 days; resolve within 2 complete billing cycles, never more than 90 days
Regulation E (Electronic Fund Transfer Act)	Debit cards and other electronic transfers	60 days after the statement is sent	USD 50 if reported within 2 business days, up to USD 500 after that, more for transfers after the 60-day window	10 business days, or up to 45 days with provisional credit (90 days for point-of-sale debit transactions)
Card network rules	All cards on that network	About 120 days for most conditions, capped at 540 days in specified cases	Set by dispute condition, not by statute	Set by network stage and acquirer deadlines

The practical effect for merchants: a dispute can still reach you through the network after the legal notice period has passed.

For the legal background, see chargeback laws and merchant rights; for the debit and credit specifics, see debit card chargebacks and credit card chargebacks. Wallet and marketplace cases can use a different rulebook. PayPal disputes opened inside PayPal run under the PayPal User Agreement, not card network rules.

Build a Repeatable Response Checklist

Validate the case
Match the disputed payment to the order and check the allegation.
Reconcile prior money movements
Check for refunds, credits or earlier disputes before you respond.
Choose the supported action
Decide whether the records support contesting the case or accepting it.
Assemble relevant evidence
Tie each file to one disputed fact. Cut anything that does not help.
Submit and retain confirmation
Keep the submission confirmation with the case record.
Review the cause and result
Find the message, shipping or payment fix that stops it happening again.

This process supports chargeback representment but following the steps does not guarantee a win. Evidence, eligibility and the issuer's view still matter, and file limits apply too: Stripe, for example, caps combined evidence at 4.5 MB and Mastercard evidence at 19 pages.

Assess Escalation With Your Acquirer

If a case progresses after your response, confirm the next stage and permitted action. The case can go on to pre-arbitration and then network arbitration, based on the network.

Escalation costs real money. Adyen’s documentation warns that a scheme ruling in the issuer’s favor can cost up to USD 600. Stripe collects USD 500 when a merchant contests a Visa or Mastercard compliance dispute, refunded only if the merchant wins.

Before you escalate, weigh the fee, deadline and evidence against the disputed amount. Escalation is not a routine second try.

Continue learning: Foundations and rules

Use Chargeback Basics and Rules: A Merchant Learning Path to choose the next merchant task in this topic.

What Is the Chargeback Process? A Complete Merchant Guide: A merchant workflow for intake, evidence, submission, and reconciliation.
How Does a Chargeback Work? A Step-by-Step Guide: A beginner explanation of the chargeback lifecycle and funds movement.

Sources and scope

Source notes updated: October 18, 2026. Card-payment disputes. Identify the network, region, reason and case stage before applying a rule. Use the due date and time zone on your case notice, not the cardholder filing window.

For a live case, keep the rulebook edition or effective date, the relevant rule and the provider notice.

Frequently Asked Questions

How Far Back Can a Cardholder File a Chargeback?

Most card network chargebacks must be filed within about 120 days of the transaction or the expected delivery date. Visa and Mastercard allow up to 540 days in specified cases, such as goods never delivered. U.S. law separately sets a 60-day notice window for Regulation Z and Regulation E errors.

What Is the 540-Day Chargeback Rule?

The 540-day chargeback rule is an outer filing cap in specified Visa and Mastercard dispute conditions.

Under Visa condition 13.1, the issuer has 120 days from the date the cardholder expected the goods or services, but never more than 540 days from the transaction processing date. It does not set an end date for the whole dispute, and it does not extend the merchant’s response window.

Do Merchants Always Have 30 or 45 Days to Respond?

No. Merchant response deadlines vary by processor, network and case stage. Stripe cites 7 to 21 days in most cases, and Adyen publishes 9 to 40 days by network. Use the deadline in the dispute notice, not a universal 30-day or 45-day window.

Can a Bank Refuse a Chargeback?

Yes. An issuing bank can decline to file a chargeback when the claim falls outside the network’s dispute conditions or misses the filing window.

It can also refuse when the cardholder skipped a required step, such as first trying to resolve a non-receipt or quality problem with the merchant. If the merchant's evidence wins, the issuer takes back the provisional credit.

What Are Valid Reasons for a Chargeback?

Valid chargeback reasons fall into four families, the same categories Visa uses for its dispute conditions: fraud, authorization problems, processing errors such as duplicate charges, and consumer disputes. Consumer disputes include goods not received, not as described, canceled recurring billing and credit not processed. Each family maps to specific reason codes with their own evidence rules.

Are Merchants Liable for Chargebacks?

Merchants are usually liable for chargebacks under their acquirer agreement. The acquirer debits the disputed amount and a fee, and the merchant gets the funds back only by winning representment. Liability can shift to the issuer in some cases, such as fraud on a 3-D Secure purchase that passed authentication.

Who Loses Money During a Chargeback?

The merchant usually loses money during a chargeback. The sale amount is debited, the chargeback fee is rarely refunded even after a win, and staff time and lost goods add to the cost. The cardholder keeps the provisional credit only if the merchant loses or does not respond.

What Are the Visa Chargeback Rules?

Visa chargeback rules sort disputes into four groups: fraud, authorization, processing errors and consumer disputes. Most give cardholders 120 days to file, up to 540 days in some cases. Since April 1, 2026, VAMP flags merchants at a 1.5% ratio in most regions.

What Are the Mastercard Chargeback Rules for 2026?

Mastercard chargeback rules for 2026 keep the 120-day filing window for most conditions. The Excessive Chargeback Merchant program starts at 100 to 299 chargebacks and a 1.5% to 2.99% ratio, and the high tier starts at 300 and 3%. Mastercard’s Global Merchant Audit Program replaces ACMP on April 1, 2027.

Does Winning a Chargeback Remove It From Monitoring?

No. A chargeback win does not remove the dispute from monitoring metrics. Visa and Mastercard count disputes when they arrive, win or lose. Disputes resolved before filing through pre-dispute products are excluded from Visa’s VAMP count.

Are Chargebacks Usually Successful for Cardholders?

Chargebacks often succeed for cardholders, mostly because many merchants never respond. Merchants surveyed for Mastercard's 2025 State of Chargebacks report said they won about half of the cases they fought, so a timely, rule-based response changes the odds.

Can Delivery Evidence Help With a Fraud Dispute?

Delivery evidence can help in a fraud dispute, based on the condition and your other records. It is neither useless nor a sure win. For Visa card-absent fraud, earlier undisputed purchases under Compelling Evidence 3.0 are often stronger.

Where Should Merchants Check Current Chargeback Rules?

Merchants should check current chargeback rules in each network’s primary documents, such as the Visa Core Rules and the Mastercard Chargeback Guide. For a live case, the processor or acquirer’s instructions come first.

Keep Your Dispute Process Current

Maintain one owner for rule updates and one source of truth for case deadlines. Review changes when your acquirer flags them, and recheck monitoring headroom against the 2026 thresholds each month. Then update the evidence checklist your team actually uses.

SHARE THIS ARTICLE