AMEX CID Policy: What Merchants Need to Know About CNP Chargebacks

Since April 2024, American Express no longer issues fraud chargebacks on authorized card-not-present transactions just because the Card Identification Number (CID) does not match. Before this change, a CID mismatch on an otherwise legitimate order still left the merchant exposed if the transaction later turned out to be fraudulent.

This guide covers what the policy actually changed, how liability shifted from merchants to Amex, how it compares to Visa and Mastercard, and whether it still holds up in 2026.

Visão geral das alterações nas políticas

As of April 2024, AMEX no longer issues fraud chargebacks for authorized CNP transactions when the CID doesn’t match the records. For the full details, refer to the AMEX factsheet.

Contexto: O processo anterior de transações do CNP

Imagine the journey of a CNP transaction. Your customer is miles away, perhaps sipping coffee in a cozy café, while their order zooms through cyberspace to your server. The CID, a four-digit security code on the front of the card, acts as a gatekeeper, ensuring the person making the purchase is indeed the cardholder. Previously, if the CID didn’t match, merchants had to ask customers to re-enter it. This extra step often led to frustration, abandoned carts, and lost sales. Worse yet, if the transaction went through and turned out to be fraudulent, the merchant bore the brunt of the chargeback under Amex’s chargeback reason codes for card-not-present disputes.

How the Policy Works

A CNP authorization response still tells you whether the transaction is approved and whether the CID matches. The difference now: you can proceed with an approved transaction even when the CID doesn’t match, without risking a fraud chargeback on it. Liability for that specific scenario shifted from the merchant to Amex.

Benefícios da mudança na política

1. Proteção contra fraudes Chargeback

Imagine não precisar ficar constantemente atento ao risco de fraudes chargebacks. Com essa nova proteção, você pode enviar transações com discrepâncias no CID com toda a confiança, sabendo que está protegido contra os problemas financeiros e administrativos de chargeback disputas .

2. Maior potencial de vendas

Lembra-se das vendas que você perdeu por causa daquelas temidas notificações de reentrada do CID? Com essa política, esses carrinhos abandonados podem se transformar em vendas concretizadas, aumentando sua lucratividade. Seus clientes apreciarão a experiência fluida e estarão mais propensos a voltar.

3. Melhoria na experiência do cliente

Think of a checkout process so smooth, that your customers glide through it effortlessly. No frustrating re-entries and no abandoned carts, just customers who complete checkout and are more likely to come back.

How Amex’s CID Policy Compares to Visa and Mastercard

Amex is the outlier here. Visa and Mastercard still expect merchants to treat a CID/CVV mismatch as a risk signal, since neither network has published a comparable liability shift.

Após a implementação da política: etapas para Lojistas

Atualização da tecnologia de pagamentos:

Update your point-of-sale or checkout systems to accept CID mismatches on approved transactions instead of prompting for re-entry.

Garantindo a conformidade:

Reach out to your point-of-sale providers or payment processors to confirm how they handle Amex authorization responses. This exemption only covers CID mismatches, not every type of dispute, reason code C08 and other Amex fraud codes still apply where the transaction itself was never authorized.

Passivo anterior vs. passivo atual e futuro

Responsabilidade anterior (antes de abril de 2024)

Lembra-se dos tempos em que uma incompatibilidade de CID significava que você era responsabilizado por fraude chargebacks? O risco financeiro e a carga administrativa recaíam sobre você.

Responsabilidade atual e futura (após abril de 2024)

From April 2024 onward, Amex shoulders the responsibility for these chargebacks instead of the merchant, as long as the transaction was authorized. That removes one recurring source of chargebacks tied to authorized orders.

Como Chargeflow ajudar

Conheça Chargeflow, sua aliada para lidar com essas mudanças. As ferramentas e os serviços Chargeflowforam desenvolvidos para ajudá-lo a se adaptar com facilidade:

1. Gerenciamento automatizado de Disputa : Minimize os riscos e os transtornos relacionados ao chargeback disputas . O sistema automatizado da Chargeflowreduz o trabalho manual necessário, garantindo que disputas sejam processados de forma rápida e eficiente, economizando seu tempo e recursos.
2. Detecção e prevenção avançadas de fraudes: Fique à frente dos fraudadores com mecanismos de ponta. Nossas ferramentas avançadas de detecção de fraudes ajudam a Identifique identificar atividades suspeitas antecipadamente, protegendo sua empresa contra transações não autorizadas e reduzindo o risco de chargebacks.
3. Real-Time Fraud Monitoring: Track fraud trends and chargeback patterns as they happen instead of after the dispute lands, so you can adjust your fraud prevention strategy before it costs you more orders.
4. Integração perfeita: Integre facilmente Chargeflow seus sistemas de pagamento já existentes, para uma transição tranquila da sua abordagem tradicional, sem interromper o desempenho da sua empresa. Essa integração permite que você aprimore seus processos enquanto se concentra nas atividades principais do seu negócio. 
5. Higher Dispute Win Rates: Chargeflow builds evidence tailored to each Amex reason code, which improves win rates on the disputes that do still land, including ones unrelated to CID mismatches.

Com o poderoso conjunto de recursos Chargeflow, você pode gerenciar facilmente a nova mudança na política da AMEX e proteger sua empresa sem interromper suas operações atuais.

Frequently Asked Questions About Amex’s CID Policy

Is Amex’s CID policy still in effect in 2026?

Yes. Amex’s factsheet describes the liability shift as a standing policy with no stated end date, and Amex’s most recent merchant regulations updates have not reversed or modified it.

What is CID and why did a mismatch used to cause chargebacks?

CID is the four-digit code on the front of an Amex card. Before April 2024, a mismatch on an approved order still left the merchant liable if that order later turned out to be fraudulent, even though the transaction had already been authorized.

Does this exemption apply to Visa or Mastercard transactions?

No. This is an Amex-specific policy. Visa and Mastercard have not published an equivalent blanket exemption for CVV mismatches, see the comparison above.

Does the CID exemption cover every type of Amex dispute?

No. It only covers fraud chargebacks tied to a CID mismatch on an authorized transaction. Other CNP chargebacks, including ones where the cardholder disputes the transaction outright, still apply.

What should merchants do to stay compliant?

Confirm with your payment processor that CID mismatches no longer trigger manual re-entry prompts, then focus fraud screening on the signals that still matter, order value, shipping mismatches, and device or account risk.

Handle the Amex Disputes This Policy Does Not Cover

Amex’s CID exemption closes one narrow gap. Every other Amex chargeback reason code, and every dispute on Visa or Mastercard, still needs a real response.

Chargeflow automates that response: it builds evidence tailored to the reason code behind each dispute, submits it, and tracks the outcome, so your team is not assembling packets by hand for the cases this policy does not touch.

Veja o que você ganha com isso:

• Save time: evidence gathering and submission run automatically for every dispute, not just Amex CNP cases.
• Higher win rate: responses are built around the specific reason code behind each dispute.
• Custos mais baixos: menos perdas disputas e menos trabalho manual de revisão Reduza , o que reduz as despesas gerais.
• Fewer repeat disputes: Chargeflow surfaces the patterns behind your chargebacks so you can close the gaps fraud keeps coming through.

If Amex’s CID exemption only solved part of your dispute load, see how Chargeflow handles the rest.