Chargeback Fraud: What It Is, Types, and How Merchants Fight It

{{cta}}

O que é a fraude “ Chargeback ”?

Chargeback fraud is the deliberate misuse of the card dispute process: a cardholder disputes a purchase they authorized and received, then keeps both the goods and the refunded money. It is also called first-party chargeback fraud, because the person filing the dispute is the real customer, not a criminal using stolen card data. It is the intentional end of friendly fraud, a broader term that also covers honest disputes such as an unrecognized billing descriptor.

Two other things are often mistaken for it. True (third-party) fraud is a criminal using stolen card data, and merchant error is a billing or fulfillment mistake that gives a customer a legitimate reason to dispute. Each has a different fix, so this guide separates them, then covers the three merchant actions that matter for the deliberate cases: detect them, respond with reason-code-matched evidence before the deadline, and stop repeat offenders. If you need the basics first, start with what is a chargeback; for the investigation side of a single case, see how to assess a suspected chargeback fraud case.

Tipos de fraudes relacionadas ao “ Chargeback ”

Deliberate chargeback fraud follows a handful of patterns. The claim the cardholder makes decides the reason code, and the reason code decides which evidence can win. For all eight types, including true-fraud patterns such as card-not-present and triangulation fraud, see our breakdown of the types of chargeback fraud.

What Chargeback Fraud Costs Merchants

Every lost dispute costs the sale, the goods already shipped, a processor fee of $15 to $100 whether you win or lose (fees vary by provider; see our payment gateway comparison), and the hours spent assembling evidence. Once disputes pile up, the exposure changes character: Visa VAMP’s standard Excessive Merchant criteria in AP, Canada, the EU and the US apply when the acquirer is not Above Standard or Excessive. They pair a combined fraud-and-dispute ratio of at least 1.5% (from April 1, 2026) with at least 1,500 monthly fraud-and-dispute records. The ratio divides the combined count of TC40 fraud reports and TC15 disputes by the count of settled TC05 card-not-present VisaNet transactions. Apply exclusions and check country and regional rules; a ratio alone does not establish monitoring or penalties. Mastercard ECM uses 100–299 current-month chargebacks and a 1.5%–2.99% ratio to previous-month captured payments. Identification uses both count and ratio, with fines beginning in the second month of identification. Assessments and remediation depend on the actual program and acquirer notice. The chargeback thresholds guide covers both programs in detail; track network-specific populations and reporting periods alongside your operational chargeback ratio.

Check the Visa VAMP fact sheet and your acquirer’s applicable notice. For processor implementation and the separate Mastercard reporting periods, see Stripe’s monitoring-program guidance.

Sources: Mastercard, What is the true cost of a chargeback for businesses? (updated June 2026, research by Datos Insights); Visa; LexisNexis True Cost of Fraud Study.

A separate 2024 Mastercard and Worldpay announcement forecast industry-wide chargeback volume of 337 million for 2026, up 42% from 2023, while Mastercard's June 2026 research with Datos Insights puts 2026 at about 286 million. The same announcement reported that Ethoca alerts prevented $1.6 billion in fraud losses due to chargebacks in 2022 and 2023. That is the clearest evidence that intercepting a dispute before it posts is the cheapest way to fight it. AI shopping agents are adding a new variable: when an agent places the order, the question of who authorized the purchase gets murkier, and AI agent chargeback liability explains how the evidence burden shifts.

Dispute Types Merchants See and How to Respond to Each

Not every dispute labeled fraud is chargeback fraud, and treating them all the same way loses winnable cases and wastes effort on unwinnable ones. Sort each dispute into one of four buckets first; the bucket decides the response.

True fraud, including schemes such as triangulation fraud, is a screening problem, not a dispute problem. If stolen-card orders are getting through, the fix belongs at checkout: AVS and CVV checks, velocity limits, and device intelligence, the controls covered in the card-not-present fraud guide. Criminals also target the merchant side directly through phishing and malware aimed at staff accounts. To safeguard workstations against phishing links and malware, team members often rely on browser protection tools or explore guardio alternatives.

Honest friendly fraud and deliberate chargeback fraud arrive with identical reason codes, which is why the signals below matter: the code tells you what the cardholder claimed, not whether the claim is true. Merchant error is the one bucket you should almost never fight. Fighting your own mistake burns a representment cycle you will lose and adds an arbitration risk you do not need.

Signals That a Dispute Is Deliberate Chargeback Fraud

No single signal proves intent. Two or three together, checked against your order data before you build the case, are enough to move a dispute from "refund and move on" to "represent and block."

• Confirmed delivery, then a "not received" or "unauthorized" claim. Carrier proof of delivery to the billing address, especially with a signature or GPS stamp, is the single strongest contradiction of the cardholder's story.
• The product was used after the dispute date. App logins, streaming activity, license activations, or repeat downloads after the chargeback was filed show the customer still has and uses what they claim they never got.
• The dispute lands after your refund window closes. A cardholder who missed your 30-day return policy and files a dispute in week five is using the bank as a refund desk.
• Repeat disputes across orders. A customer with two or more prior chargebacks on your store, or on the same card, email, or device fingerprint, has a pattern, not a one-off misunderstanding.
• Multiple undisputed orders on the same credential. Someone who has bought from you three times without complaint and now claims fraud on the fourth is rarely a fraud victim. This is exactly the history Compelling Evidence 3.0 was built to use.
• A refund request that skipped straight to the bank. No support ticket, no email, no chat, then a chargeback. Legitimate customers usually try you first.
• The story changes. A cardholder who told your support team the item was "not as described" and then told their issuer it was "unauthorized" is testing which claim sticks.
• Claim contradicts the order data. "Unauthorized" on an order shipped to the cardholder's own billing address, on an account with a saved card and years of history, is a contradiction the issuer's analyst will see too.

Deliberate abuse of the dispute process is also a legal exposure for the cardholder, not just a loss for you. Repeat offenders can face account closure, collection, and in documented cases civil or criminal action, as covered in the legal risks of chargeback fraud. Knowing that gives you a firmer footing when you decide to fight.

How to Respond to a Chargeback Fraud Dispute

A winnable case is lost most often on process, not on evidence: the wrong documents, a mismatched reason code, or a response filed a day late. Run every suspected chargeback fraud dispute through the same six steps.

1. Catch it at the alert stage if you can. Ethoca and Verifi alerts tell you about a dispute before it posts (Verifi's window is 72 hours), and Visa's Rapid Dispute Resolution resolves eligible disputes automatically using rules you set. Either route lets you refund before the dispute becomes a chargeback on your ratio. For honest friendly fraud, refunding at this stage costs less than a lost representment. For a case with strong fraud signals, let it post so you can fight and win it. The chargeback alerts guide explains how the networks route these notifications.
2. Pull the full evidence file within 48 hours. Order confirmation with timestamp and IP, AVS and CVV match results, 3D Secure authentication record if used, carrier tracking with proof of delivery, product or service usage logs, every support interaction, your published refund and shipping policy as it appeared at checkout, and the customer's order history. Gathering it late means gathering it incomplete.
3. Match the evidence to the reason code. Issuers evaluate a response against the specific claim. A "product not received" dispute (Visa 13.1) is won with delivery proof; an "unauthorized" dispute (Visa 10.4) is won with authentication data and evidence the cardholder participated. Sending delivery proof against a fraud code, or vice versa, is the most common self-inflicted loss.
4. Apply Compelling Evidence 3.0 where it fits. For Visa 10.4 card-absent fraud disputes, you can block the chargeback outright by showing two prior transactions on the same card, made 120 to 365 days before the disputed transaction, that were never disputed as fraud and share at least two core data elements with the disputed order (IP address, device ID, account login, or delivery address, with at least one being IP or device ID). The rules are precise, so read Visa Compelling Evidence 3.0 explained before relying on it. For Mastercard 4837 disputes, the counterpart is Mastercard First-Party Trust, which also uses the cardholder's past undisputed transactions.
5. Write a one-page rebuttal and submit before the deadline. Lead with the claim, state the fact that contradicts it, and reference each attached exhibit in order. Response windows are typically 7 to 30 days from the chargeback date depending on network and processor, and a late submission is an automatic loss. The chargeback representment guide walks through the full submission flow, and compelling evidence covers what issuers weigh most heavily.
6. Record the outcome and act on it. Win or lose, log the reason code, evidence used, and result. Add confirmed fraudsters to your blocklist by email, card fingerprint, device, and shipping address. If you lost a case you should have won, check whether the evidence was missing or mismatched, and fix the intake step that caused it.

Two timing facts frame this process. Cardholders in the US have a legal right under the Fair Credit Billing Act to dispute billing errors, and Regulation Z requires that notice to reach the card issuer within 60 days of the statement showing the charge. Card network rules then give cardholders up to 120 days from the transaction or expected delivery date for most dispute types. That means a deliberate chargeback can arrive four months after a sale you considered closed, so your evidence retention has to run at least that long.

Chargeback Fraud Prevention Best Practices

Chargeback prevention lowers the count, and the count is what the card networks measure. Response recovers money on disputes that already happened. These controls are ranked by how directly they reduce deliberate chargeback fraud, as opposed to true fraud.

• Get delivery proof on every physical order. Tracking with confirmed delivery on all orders, signature confirmation above your average order value, and photo-on-delivery where your carrier offers it. This one control wins most "not received" disputes.
• Log usage for digital goods and services. Timestamps for downloads, logins, streams, and license activations turn "never received" into a provable false claim.
• Make your billing descriptor unmistakable. Your brand name as customers know it, plus a phone number or URL. Unrecognized descriptors are a top cause of honest friendly fraud, which is the volume you want out of the way so real abuse stands out.
• Publish and enforce clear policies at checkout. Refund, cancellation, and shipping terms visible before the buy button, with acceptance logged. A policy the cardholder agreed to is admissible evidence; a policy buried in a footer is not.
• Make refunds easier than disputes. Fast support response, a self-service cancellation path, and a refund process that completes in days. Every refund you issue directly is a chargeback that never counts against your ratio, and it removes the cardholder's justification for going to the bank.
• Run pre-transaction screening. Address verification, CVV, velocity checks, and device fingerprinting stop true fraud at checkout, and a negative list of prior chargeback fraudsters stops repeat offenders. Chargeflow Prevent handles this screening layer before authorization.
• Use 3D Secure selectively. 3D Secure shifts fraud liability to the issuer on authenticated transactions. Apply it to high-risk orders rather than all traffic to avoid checkout friction.
• Retain evidence for at least 18 months. Order data, communications, delivery records, and policy versions. The dispute window plus a possible pre-arbitration cycle can run well past a year.
• Review your dispute data monthly. Track disputes by reason code, product, acquisition channel, and customer cohort. A spike in "not as described" on one SKU is a product page problem; a spike in "unauthorized" from one traffic source is a fraud ring.

For the broader checkout-side controls that stop stolen-card orders before they become disputes, the ecommerce fraud prevention guide goes deeper on screening rules, and refund fraud prevention covers the return-abuse patterns that often precede deliberate chargebacks.

Chargeback Fraud Prevention by Industry

The evidence that wins depends on what you sell. Three verticals carry the highest chargeback fraud exposure and each has a specific fix.

• Travel and hospitality: Bookings are high-value and cancellation-driven. Require acceptance of the cancellation policy at booking with a logged timestamp, capture ID at check-in, and keep check-in and usage records (room keys issued, boarding passes scanned) to defeat "service not provided" claims.
• Digital goods and software: No shipment means no carrier proof, so usage logs are your delivery confirmation. Track downloads, activations, and logins by account, IP, and device, and require a verified email before delivery. Digital goods chargebacks covers the evidence set in detail.
• Subscriptions: Most disputes are "did not authorize the renewal." Send a renewal reminder before each billing cycle, log the acceptance of recurring terms at signup, and make cancellation a one-click action. Subscription chargebacks explains how to document consent so renewals hold up in representment.

Perguntas frequentes

O que é a fraude do “ chargeback ”?

Chargeback fraud is when a cardholder disputes a purchase they authorized and received, intending to keep both the goods and the refund. It is also called first-party chargeback fraud, and it differs from third-party fraud, where a criminal uses stolen card data, and from honest friendly fraud, where the cardholder disputes a valid charge by mistake.

What are the main types of chargeback fraud?

The main types of chargeback fraud are item-not-received claims, unauthorized-transaction claims on purchases the cardholder made, not-as-described claims on items that matched the listing, double dipping (a chargeback after a refund), and renewal denials on subscriptions the customer agreed to. Each is filed under a different reason code, so the evidence that counters it differs.

Como os sites Lojistas ,PREVENÇÃO echargeback podem ser fraudulentos?

Merchants prevent chargeback fraud by removing the cardholder's cover story and the incentive to file: confirmed delivery on every shipment, usage logs for digital products, a recognizable billing descriptor, policies accepted at checkout, a refund process faster than the bank's, and pre-transaction screening that blocks known repeat offenders. Alerts from Ethoca and Verifi then intercept the disputes that still get filed before they count against your ratio.

How do you fight a chargeback fraud dispute?

To fight a chargeback fraud dispute, pull the complete order, authentication, delivery, and usage evidence, match it to the exact reason code the issuer used, apply Visa Compelling Evidence 3.0 if the customer has prior undisputed orders, and submit a concise rebuttal through your processor before the response deadline. Then blocklist the customer so the same person cannot repeat the pattern.

Is chargeback fraud a crime or a felony?

Yes, chargeback fraud is a crime: deliberately disputing a charge you authorized and received is a form of fraud, and a cardholder who does it can get in trouble. Whether it is charged as a felony or a misdemeanor depends on the state and the amount involved. In practice most individual cases are handled by issuers closing accounts or by merchants pursuing collections rather than by prosecution, but repeat and high-value offenders have faced civil suits and criminal charges. For merchants, a documented pattern of abuse strengthens both your representment and any follow-up action.

Do banks really investigate chargebacks?

Issuing banks review the cardholder's claim and, if the merchant responds, weigh that response against it. They do not independently investigate the transaction, so the merchant's evidence is usually the only counterweight to the cardholder's story. A dispute with no merchant response is decided on the cardholder's word alone, which is why deliberate chargeback fraud succeeds so often against merchants who do not fight.

How serious is chargeback fraud for merchants?

Chargeback fraud is serious because it compounds: each lost dispute costs the sale, the shipped goods, and a $15 to $100 processor fee, and eligible monitoring activity can persist even when a case is won. Visa VAMP uses the combined fraud-and-dispute population, exclusions and scoped count conditions described above; Mastercard uses separate periods and count/ratio rules. Follow the actual acquirer notice for identification and consequences instead of assuming every dispute counts or one ratio establishes an automatic penalty.

What is the difference between friendly fraud and chargeback fraud?

Friendly fraud is any dispute a real cardholder files on a legitimate charge, whether by honest mistake or on purpose. Chargeback fraud is the deliberate subset: the cardholder knows the charge was valid and disputes it anyway to keep the goods and the money. The distinction matters operationally because honest friendly fraud is best resolved with a quick refund at the alert stage, while deliberate chargeback fraud should be fought and the customer blocked.

Automate Chargeback Fraud Management With Chargeflow

Every step above is a manual, deadline-driven task when you run it by hand, and it scales badly. Chargeflow covers the full sequence. Chargeflow Alerts connects to the Ethoca and Verifi networks so you can refund honest disputes before they post. Chargeflow's automated recovery pulls the evidence from your store and payment data, matches it to the reason code, applies Compelling Evidence 3.0 where the history qualifies, and files the representment before the deadline, with no upfront cost and a fee only on won disputes. Chargeflow Prevent screens orders before authorization to stop known fraudsters from transacting again.

If chargeback fraud is cutting into your revenue, start for free and fight every dispute on autopilot.