AMEX CID Policy: What Merchants Need to Know About CNP Chargebacks

Since April 2024, American Express no longer issues fraud chargebacks on authorized card-not-present transactions just because the Card Identification Number (CID) does not match. Before this change, a CID mismatch on an otherwise legitimate order still left the merchant exposed if the transaction later turned out to be fraudulent.

This guide covers what the policy actually changed, how liability shifted from merchants to Amex, how it compares to Visa and Mastercard, and whether it still holds up in 2026.

Overzicht van beleidswijzigingen

As of April 2024, AMEX no longer issues fraud chargebacks for authorized CNP transactions when the CID doesn’t match the records. For the full details, refer to the AMEX factsheet.

Achtergrond: het vroegere transactieproces van CNP

Imagine the journey of a CNP transaction. Your customer is miles away, perhaps sipping coffee in a cozy café, while their order zooms through cyberspace to your server. The CID, a four-digit security code on the front of the card, acts as a gatekeeper, ensuring the person making the purchase is indeed the cardholder. Previously, if the CID didn’t match, merchants had to ask customers to re-enter it. This extra step often led to frustration, abandoned carts, and lost sales. Worse yet, if the transaction went through and turned out to be fraudulent, the merchant bore the brunt of the chargeback under Amex’s chargeback reason codes for card-not-present disputes.

How the Policy Works

A CNP authorization response still tells you whether the transaction is approved and whether the CID matches. The difference now: you can proceed with an approved transaction even when the CID doesn’t match, without risking a fraud chargeback on it. Liability for that specific scenario shifted from the merchant to Amex.

Voordelen van de beleidswijziging

1. Bescherming tegen terugboekingen wegens fraude

Imagine not having to constantly look over your shoulder for fraud chargebacks. With this new protection, you can confidently submit transactions with CID mismatches, knowing you’re shielded from the financial and administrative headaches of chargeback disputes.

2. Groter verkooppotentieel

Herinnert u zich nog de verkopen die u bent misgelopen door die vervelende verzoeken om opnieuw in te loggen bij uw klantaccount? Met dit beleid kunnen die verlaten winkelwagentjes worden omgezet in voltooide verkopen, waardoor uw winstgevendheid een boost krijgt. Uw klanten zullen de naadloze ervaring waarderen en zullen wellicht eerder terugkomen.

3. Verbeterde klantervaring

Think of a checkout process so smooth, that your customers glide through it effortlessly. No frustrating re-entries and no abandoned carts, just customers who complete checkout and are more likely to come back.

How Amex’s CID Policy Compares to Visa and Mastercard

Amex is the outlier here. Visa and Mastercard still expect merchants to treat a CID/CVV mismatch as a risk signal, since neither network has published a comparable liability shift.

Na de invoering van het beleid: stappen voor verkopers

Modernisering van de betaaltechnologie:

Update your point-of-sale or checkout systems to accept CID mismatches on approved transactions instead of prompting for re-entry.

Zorgen voor naleving:

Reach out to your point-of-sale providers or payment processors to confirm how they handle Amex authorization responses. This exemption only covers CID mismatches, not every type of dispute, reason code C08 and other Amex fraud codes still apply where the transaction itself was never authorized.

Vroegere versus huidige en toekomstige verplichtingen

Eerdere aansprakelijkheid (vóór april 2024)

Remember the days when a CID mismatch meant you were on the hook for fraud chargebacks? The financial risk and administrative load were yours to bear.

Huidige en toekomstige aansprakelijkheid (na april 2024)

From April 2024 onward, Amex shoulders the responsibility for these chargebacks instead of the merchant, as long as the transaction was authorized. That removes one recurring source of chargebacks tied to authorized orders.

Hoe Chargeflow helpen

Maak kennis met Chargeflow, uw partner bij het omgaan met deze veranderingen. De tools en diensten Chargeflowzijn ontworpen om u te helpen zich naadloos aan te passen:

1. Geautomatiseerd geschillenbeheer: Minimaliseer het risico en het gedoe van terugboekingsgeschillen. Het geautomatiseerde systeem Chargeflowvermindert de benodigde handmatige inspanning, zorgt ervoor dat geschillen snel en efficiënt worden afgehandeld en bespaart u zo tijd en middelen.
2. Advanced Fraud Detection and Prevention: Stay ahead of fraudsters with cutting-edge mechanisms. Our advanced fraud detection tools help identify suspicious activities early, protecting your business from unauthorized transactions and reducing the risk of chargebacks.
3. Real-Time Fraud Monitoring: Track fraud trends and chargeback patterns as they happen instead of after the dispute lands, so you can adjust your fraud prevention strategy before it costs you more orders.
4. Naadloze integratie: Integreer Chargeflow eenvoudig Chargeflow uw bestaande betalingssystemen, voor een soepele overgang vanuit uw traditionele werkwijze zonder dat uw bedrijfsvoering wordt onderbroken. Dankzij deze integratie kunt u uw processen verbeteren terwijl u zich concentreert op uw kernactiviteiten. 
5. Higher Dispute Win Rates: Chargeflow builds evidence tailored to each Amex reason code, which improves win rates on the disputes that do still land, including ones unrelated to CID mismatches.

Met de krachtige reeks functies van Chargeflow kunt u de nieuwe beleidswijziging van AMEX eenvoudig in goede banen leiden en uw bedrijf beschermen zonder uw huidige bedrijfsvoering te verstoren.

Frequently Asked Questions About Amex’s CID Policy

Is Amex’s CID policy still in effect in 2026?

Yes. Amex’s factsheet describes the liability shift as a standing policy with no stated end date, and Amex’s most recent merchant regulations updates have not reversed or modified it.

What is CID and why did a mismatch used to cause chargebacks?

CID is the four-digit code on the front of an Amex card. Before April 2024, a mismatch on an approved order still left the merchant liable if that order later turned out to be fraudulent, even though the transaction had already been authorized.

Does this exemption apply to Visa or Mastercard transactions?

No. This is an Amex-specific policy. Visa and Mastercard have not published an equivalent blanket exemption for CVV mismatches, see the comparison above.

Does the CID exemption cover every type of Amex dispute?

No. It only covers fraud chargebacks tied to a CID mismatch on an authorized transaction. Other CNP chargebacks, including ones where the cardholder disputes the transaction outright, still apply.

What should merchants do to stay compliant?

Confirm with your payment processor that CID mismatches no longer trigger manual re-entry prompts, then focus fraud screening on the signals that still matter, order value, shipping mismatches, and device or account risk.

Handle the Amex Disputes This Policy Does Not Cover

Amex’s CID exemption closes one narrow gap. Every other Amex chargeback reason code, and every dispute on Visa or Mastercard, still needs a real response.

Chargeflow automates that response: it builds evidence tailored to the reason code behind each dispute, submits it, and tracks the outcome, so your team is not assembling packets by hand for the cases this policy does not touch.

Hier Zijn kun je zien wat je daarvoor krijgt:

• Save time: evidence gathering and submission run automatically for every dispute, not just Amex CNP cases.
• Higher win rate: responses are built around the specific reason code behind each dispute.
• Lagere kosten: minder verloren geschillen en minder handmatig controlevwerk zorgen voor lagere overheadkosten.
• Fewer repeat disputes: Chargeflow surfaces the patterns behind your chargebacks so you can close the gaps fraud keeps coming through.

If Amex’s CID exemption only solved part of your dispute load, see how Chargeflow handles the rest.