How to Win an Unauthorized Transaction Chargeback

An unauthorized transaction chargeback is a card dispute in which the cardholder tells their issuing bank they did not make or approve a charge. Issuers file it under a fraud reason code, such as Visa 10.4 or Mastercard 4837.

• The issuer pulls the funds back first and asks questions later.
• You win by proving the real cardholder took part in the purchase.
• The reason code decides which evidence counts.

Some cardholders also dispute a charge that hit their card twice. That is not fraud. A duplicate charge is a processing error with its own codes, such as Visa 12.6. If you are new to disputes, start with what a chargeback is.

{{cta}}

How an Unauthorized Transaction Chargeback Works

When a customer files an Unauthorized Transaction chargeback, the card issuer reverses the charge. This bill reversal is the chargeback. The issuer sends the case through the card network to your acquirer, and your acquirer or processor asks you to respond.

You can fight any chargeback. Still, an Unauthorized Transaction chargeback happens to be one tough nut that many merchants cannot quite crack. Our primer on how representment works covers the basics. For the full process, see our handbook on how to win chargeback disputes.

Here is how one merchant, Frontier Gamers, described the problem:

“Tenho um servidor do Minecraft, e praticamente todas as reclamações de “ chargeback ” que recebo são sempre mal-intencionadas. É muito fácil para mim contestar quase todos os motivos para a criação de uma reclamação. No entanto, quando se trata de reclamações por “Transação não autorizada”, raramente consigo vencer. Não há como provar que a transação foi autorizada, nem há nada que eu possa fazer a respeito. Posso informar ao PayPal que a reclamação por “Transação não autorizada” foi mal-intencionada e confirmar que eles compraram o item e coisas do tipo, mas isso não parece adiantar nada. Gostaria de saber se vocês poderiam me ajudar a encontrar uma maneira de aumentar minhas chances de vencer esses casos.”

The tips below answer requests like this one. They show how to fight and win chargebacks filed as fraudulent Unauthorized Transaction disputes.

Unauthorized Transaction Reason Codes by Card Network

Every card network has its own fraud codes. Read the code before you gather anything. A card-present code needs chip or terminal records. A card-not-present code needs online identity data.

Code names come from North's chargeback reason code reference. For full code-by-code detail, see the Visa chargeback reason codes, Mastercard chargeback reason codes, American Express chargeback reason codes and Discover chargeback reason codes guides. Our breakdown of fraud-related chargeback reason codes explains how issuers pick between them.

Visa 10.5 is a special case. Visa replaced its fraud monitoring program with VAMP in 2025, and Rapyd notes that merchants can rarely respond to 10.5 cases. The exceptions are a duplicate dispute, a refund issued before the chargeback, or a written withdrawal from the cardholder (Rapyd).

What Evidence Wins an Unauthorized Transaction Chargeback

The issuer wants proof that the cardholder, not a thief, took part. Generic receipts rarely do that. Match your compelling evidence to the claim family.

Chip codes turn on terminal data, not customer history. Unauthorized Transactions at a terminal are won with the chip or PIN record, not the order history.

Visa CE3.0 and Mastercard First-Party Trust

Both networks now let merchants beat card-not-present fraud claims with customer history. Visa calls its rule Compelling Evidence 3.0 (CE3.0), and it applies to reason code 10.4. Mastercard runs First-Party Trust for reason code 4837.

Those are the Visa CE3.0 criteria for ordinary purchase history, per our Visa Compelling Evidence 3.0 guide and Visa's CE FAQ. For disputes processed on or after October 24, 2026, Visa also allows qualifying history across associated credentials, with regional and acquirer limits.

Read the full Mastercard First-Party Trust breakdown for the data fields and enrollment steps.

CE3.0 also helps your monitoring ratio. Fraud disputes resolved through CE3.0 in the same month are excluded from the Visa VAMP ratio (Checkout.com). That matters because the Visa Acquirer Monitoring Program flags merchants above a 1.5% ratio, the Excessive threshold since April 1, 2026.

Use 3-D Secure to Shift Fraud Liability

3D Secure 2.0 asks the issuer to verify the cardholder at checkout. When that check succeeds, liability for a fraud chargeback moves from you to the issuer. It does not cover non-fraud disputes, such as item not received.

Adyen calls 3D Secure the most effective defense against fraudulent ecommerce chargebacks. Add it to high-risk or high-value orders first, so good customers see little extra friction.

Use Fraud Detection Tools Such as AVS and Security Codes

A dispute creates handling costs even when you later recover the money. Measure net recovered value from real case outcomes and fees, not one industry fraud-loss percentage. A faster route to chargeback recovery is to let automation handle the filings.

So you must put preventive measures in place to protect your business from Unauthorized Transaction claims. One crucial way to do that is with security tools such as Address Verification Services (AVS).

Address Verification Service (AVS) is a fraud prevention tool that checks the customer’s billing information. It compares the billing address the customer enters with the address on file at the card issuing bank.

AVS is not a complete tool for stopping unauthorized use. But a failed or missing AVS match is a significant fraud red flag that you should take seriously.

You can take your Unauthorized Transaction security a step further with card security codes, often called the Card Verification Value (CVV). CVV is the 3-digit number on the back of a Visa, Mastercard or Discover card. On an American Express card, it is the 4-digit code on the front.

A CVV match shows the buyer had the card details. It does not prove the rightful cardholder made the purchase. Availability depends on your payment setup, so use it with other records. See Stripe’s issuer-check definitions.

Fraud claims are a big share of disputes. Mastercard says nearly half of chargebacks are reported as fraud (Mastercard). AVS and CVV checks will not make chargebacks go away. But they will go a long way in cutting the number of Unauthorized Transactions that come your way.

Screen Customers’ IP Addresses and Track Their Fraud Risk Score

Another essential measure against Unauthorized Transactions is to track your customers’ IP addresses and fraud scores. Many merchants also lean on real-time chargeback alerts to intercept disputes early.

Tools such as geolocation help you tell who is placing the order based on the IP address. This helps cover the limits of AVS. You can compare the customer’s IP location with the billing details on file to make sure there is no foul play.

Criminals often use proxies to disguise their IP addresses, so geolocation can fall short. That is where proxy piercing comes in. With this tool, you can sift through transactions by IP address and reduce the risk of processing Unauthorized Transactions.

Proxy piercing can also help you trace a fraudster’s location if an Unauthorized Transaction has already happened.

Besides watching where orders come from, keep an eye on each customer’s fraud score. With fraud scoring, you can quickly tell the amount of risk that the transaction represents. It helps you decide which orders could fall into the Unauthorized Transactions radar.

You can set your system to blacklist risky clients or reject their transactions automatically. However, setting up fraud scoring can be complex and subjective, and you risk blocking legitimate buyers. A large share of disputes are really friendly fraud in disguise.

Make Sure That You Ship Your Orders With Tracking Details

Order tracking futureproofs your Unauthorized Transactions representment efforts, and it has other benefits too.

When a customer places an order, they start thinking about the delivery date right away. So include order tracking information with every purchase. Order tracking also builds the record you need later.

Customers sometimes forget a purchase and then file an Unauthorized Transaction chargeback. Tracking gives you evidence that they received and interacted with the order. Our guide on how to use delivery confirmation to fight fraudulent chargebacks covers carrier proof in depth.

Digital goods have no parcel to track. Keep download, login and usage logs instead, tied to the buyer’s account and IP address. See how to fight fraudulent chargebacks on digital goods.

Even if you know an Unauthorized Transaction claim is bogus, you will lose the case without enough evidence to prove it.

PayPal applies its own claim and Seller Protection rules, and physical shipments and eligible digital goods need different evidence. Missing tracking does not lead to one fixed outcome for every claim. Check the case notice and the US Seller Protection terms.

Once tracking is in your evidence stack, a few more records boost your case: web logs, time stamps, and customer emails that link the cardholder to the person who placed the order.

Delivery details such as a customer signature help too, as does proof the customer lives or works at the delivery address. Put it all in a strong chargeback response letter.

Should You Fight or Accept an Unauthorized Transaction Chargeback?

Not every fraud claim is worth fighting. If a thief really used a stolen card, the cardholder is right and your evidence will not change that. Use the cost of each case to decide.

Sources: the LexisNexis True Cost of Fraud Study (2026 update) and Mastercard research with Datos Insights, which also expects 286 million chargebacks in 2026. Read more on the true cost of chargebacks.

Watch the clock either way. Visa gives the acquirer 30 days to respond, and Mastercard allows 45 days for a second presentment, but processors keep part of that window. Our chargeback time limit guide lists the deadlines. Missing one means you lose the chargeback by default.

Get Professional Assistance in Mitigating Unauthorized Transaction Chargebacks

There’s no denying it: fighting chargebacks can be messy, time-consuming, and expensive. Fraud patterns keep shifting, and each Unauthorized Transaction claim needs its own records.

Unauthorized-use claims need case-specific records. A customer’s earlier dispute can be legitimate. It does not prove they will dispute again, or that the current claim is deliberate abuse. Investigate the order, authentication, fulfillment and communications.

A historical forecast does not tell you your current chance of losing an unauthorized-use case. Use the applicable reason code, evidence rules and actual reply-by date.

Chargeflow has built transparent chargeback management software that puts a full "Unauthorized Transaction" defense around your business. Chargeflow Automation collects and enriches 1,000+ data points per case. It builds card-scheme-compliant evidence, including CE3.0, and submits it before the deadline.

Besides flagging suspicious Unauthorized Transactions, our system also helps you fight chargebacks and win. When a chargeback hits, we gather the transaction data and build the case for you. Chargeflow has recovered $200M+ for 20K+ merchants.

You pay a 25% success fee only on chargebacks we recover, backed by a 4X ROI guarantee. Pair it with Alerts, which can stop up to 90% of chargebacks before they are filed.

{{cta}}

Win More Unauthorized Transaction Chargebacks With Better Evidence

Unauthorized Transaction claims are winnable when your evidence matches the reason code. Capture IP, device and login data on every order, use 3-D Secure where risk is high, and check CE3.0 or First-Party Trust before you respond. It’s simple: we do the work, and you get the results. Sign up with our 2-click process and see Chargeflow in action.

Perguntas frequentes

What is an unauthorized transaction chargeback?

An unauthorized transaction chargeback is a dispute where the cardholder tells their bank they did not make or approve a card payment. The issuer files it under a fraud reason code, such as Visa 10.4 or Mastercard 4837, and reverses the funds until the merchant proves the cardholder took part.

Can a merchant win an unauthorized transaction dispute?

Yes, a merchant can win an unauthorized transaction dispute when the evidence ties the real cardholder to the purchase. Strong proof includes a 3-D Secure result, matching IP and device data, delivery to a verified address and, for Visa 10.4, CE3.0 history from two earlier undisputed orders.

What is chargeback reason code 10.4?

Visa chargeback reason code 10.4 is "Other Fraud: Card-Absent Environment." Issuers use it when a cardholder says they did not authorize an online, phone or app purchase. It is the code where Visa Compelling Evidence 3.0 applies.

Do banks really investigate chargebacks?

Banks do review chargebacks, but the issuer usually credits the cardholder first. The issuer then reviews the evidence the merchant sends through the acquirer. A fraud claim with no merchant response stays with the cardholder.

Who usually wins chargebacks?

The side with evidence that meets the reason code rules usually wins a chargeback. Cardholders win by default when a merchant does not respond in time. Merchants win unauthorized transaction chargebacks when records such as 3-D Secure, IP, device and delivery data show the cardholder took part.

How long does a chargeback dispute take?

A chargeback dispute often takes one to three months. Visa gives the acquirer 30 days to respond and Mastercard allows 45 days for a second presentment, then the issuer reviews the evidence. Pre-arbitration or arbitration adds more time.

What happens if you lose a chargeback?

If a merchant loses a chargeback, the disputed amount stays with the cardholder and the merchant usually keeps paying the chargeback fee. The case also counts toward the merchant's dispute ratio in programs such as Visa VAMP. Some cases can move to pre-arbitration if new evidence exists.

What are the best payment dispute solutions for unauthorized orders?

The best payment dispute solutions for unauthorized orders combine prevention and recovery. Use 3-D Secure, AVS and CVV at checkout, chargeback alerts to refund before a dispute posts, and an automated platform such as Chargeflow to build CE3.0-ready evidence for the cases worth fighting.