Guide · Payments primer

    Chargeback thresholds, explained.

    Last updated: 11 July 2026

    Every card-not-present merchant lives inside four overlapping chargeback monitoring programs: Visa VDMP and VFMP, Mastercard ECM and EFM. Cross the early-warning threshold and you enter a monitoring period with escalating fees. Cross the enforcement threshold and you risk termination and MATCH list placement. This guide covers the exact thresholds, how the ratios are calculated, what monitoring costs, and how mitigation tools (Ethoca, Verifi RDR, 3DS2 SCA) move the numbers.

    The four programs

    Visa and Mastercard each run two separate monitoring programs — one for disputes, one for fraud. A merchant can be clean on one and breach the other.

    ProgramTracksEarly warningEnforcement
    Visa VDMPNon-fraud disputes0.9% ratio OR 100 CBs/mo1.5% ratio OR 100 CBs/mo
    Visa VFMPFraud-coded chargebacks0.9% ratio + $75k/mo1.8% ratio + $250k/mo
    Mastercard ECMNon-fraud disputes1.5% ratio3.0% ratio
    Mastercard EFMFraud-coded chargebacks0.5% ratio + $50k/mo1.0% ratio + $250k/mo

    Ratios are calculated on the current calendar month, using chargeback count divided by settled transaction count. A merchant can "cool off" in one month by processing more clean volume, but the ratio recomputes fresh each month.

    What happens when you breach

    Visa VDMP

    1. Notification. Your acquirer receives a VDMP notification, and passes it to you within days.
    2. 4-month monitoring. You submit a Chargeback Reduction Plan within 30 days.
    3. Monthly fees. $25,000/mo during standard-tier monitoring; $50,000/mo during excessive-tier monitoring, plus $5–$50 per chargeback in issuer recovery fees.
    4. Exit or escalate. Drop below the threshold for two consecutive months → exit. Stay at or above → escalate to excessive tier or termination.

    Mastercard ECM

    1. Notification. Acquirer notified after two consecutive months above the threshold.
    2. 6-month monitoring track. Monthly reporting to the acquirer.
    3. Per-chargeback fees. $150–$500 per chargeback during the monitoring window; escalates to $1,000+ if you cross into excessive.
    4. Exit or terminate. Drop below 1.5% for two consecutive months → exit. Stay above → account termination and MATCH list placement.

    Mitigation stack (what actually moves the ratio)

    The order matters. Each layer works on a different piece of the chargeback lifecycle.

    3DS2 SCA
    At authorization

    Authenticates the cardholder via issuer challenge. Shifts liability for 'friendly fraud' reason codes (10.4, 13.1, 13.2) to the issuer.

    Typical impact: 30%–50% ratio reduction for card-not-present traffic
    Ethoca alerts
    Post-transaction, pre-dispute

    Issuer flags a dispute intent. You get 24–72 hours to refund. The chargeback never opens.

    Typical impact: 20%–40% of would-be chargebacks intercepted
    Verifi Rapid Dispute Resolution (RDR)
    Post-transaction, pre-dispute

    Pre-defined categories auto-refunded at the issuer level. Never becomes a chargeback.

    Typical impact: 10%–25% additional intercept on top of Ethoca
    Descriptor design
    At statement

    Billing descriptor includes your customer-service phone or URL, cutting 'unknown charge' disputes.

    Typical impact: 30%–40% reduction in 'not recognized' disputes
    Pre-billing notice
    3–7 days before rebill

    Email or SMS reminder before the subscription rebills, with cancel link. Required by Visa VIRP for tiers over $50/mo.

    Typical impact: 10%–20% ratio reduction on continuity offers

    Stacked, this stack takes a merchant from a 1.4% baseline to a 0.4–0.6% managed ratio — comfortably below every threshold. The math is additive but not perfectly linear (Ethoca and RDR overlap on some dispute categories), so plan on the low end when modeling.

    Common mistakes that push merchants into monitoring

    1. Ignoring the monthly recount. Ratios reset every month. A merchant one bad month away from the threshold can push clean volume the next month to buy runway.
    2. Waiting for the alert. Ethoca and RDR are worthless if you don't action them within the window. Have someone monitoring the queue daily.
    3. Cheap descriptors. A descriptor like "NUTRA-BILL" generates disputes on its own. Include a recognizable brand name + contact.
    4. Skipping 3DS on high-risk BINs. If you don't challenge high-fraud BINs, you carry the friendly fraud liability yourself. Adaptive 3DS lets you challenge only what you need to.
    5. Under-communicating on continuity. The pre-billing notice isn't optional for the top rebill tiers. Missing it invites the exact chargebacks it was designed to prevent.

    FAQ

    Need a processor with the full stack included?

    VenderaPay ships Ethoca + Verifi RDR + 3DS2 on every high-risk account. Not add-ons — defaults.

    Apply for a merchant account
    venderapay
    © 2026 VenderaPay. Specialised payment processing for high-risk verticals.