Card Network Chargeback Thresholds Explained

Most merchants know that card networks monitor chargeback ratios and that exceeding a threshold means trouble. What most merchants do not know is how the fine structures work once a threshold is breached, because the fines are what actually threaten the business. The ratio gets you into the program. The fine schedule is what determines whether the program ends you.

Visa and Mastercard run separate monitoring programs with different formulas, different threshold levels, and entirely different penalty structures. A merchant who understands both can make informed decisions about where their ratio sits and what the consequences of different trajectories look like. A merchant who does not understand the fine structures treats both programs as equally urgent, which means they often underestimate Mastercard’s program while overestimating Visa’s.

The Visa VAMP Program

Visa’s Acquirer Monitoring Program replaced its previous separate fraud and dispute monitoring programs in April 2025. Where Visa used to run the Visa Dispute Monitoring Program and the Visa Fraud Monitoring Program as separate systems, VAMP combines both into a single ratio calculated monthly. The program overview, including the formula and threshold structure, is published directly by Visa at corporate.visa.com.

The VAMP formula counts TC40 fraud reports and TC15 disputes in the numerator, divided by TC05 settled card-not-present transactions. That formula and the threshold levels that trigger enforcement are covered in detail in the chargeback ratio calculation guide. What matters here is what happens after a merchant crosses the threshold.

As of April 1, 2026, the merchant Excessive threshold is 1.5 percent for the US, Canada, EU, Asia Pacific, and Latin America. CEMEA merchants retain the 2.2 percent threshold. A minimum of 1,500 combined fraud reports and disputes per month is required before Visa formally enrols a merchant in the Excessive program. Merchants below that monthly event count can exceed the ratio percentage without triggering formal program enrollment, though their acquirer may still apply internal controls independently.

There is no warning tier for merchants under VAMP. Visa removed the tiered approach when it consolidated its programs. A merchant either sits below the Excessive threshold or sits in it. Once in the Excessive tier, the fine is $8 per fraudulent or disputed card-not-present transaction, administered through the acquirer, effective from October 1, 2025.

Visa does apply a grace period to first-time violations within a rolling 12-month window. A merchant crossing the threshold for the first time receives a three-month period to bring the ratio back below 1.5 percent before fines begin to accrue. A second violation within the same 12-month window receives no grace period. Fines begin immediately.

The acquirer-level thresholds are significantly lower than the merchant thresholds and matter to individual merchants in a specific way. Acquirer Above Standard sits at 0.5 percent. Acquirer Excessive sits at 0.7 percent. When an acquirer’s portfolio-level VAMP ratio crosses Above Standard, Visa assesses $4 per dispute across all merchants in the portfolio contributing to that ratio. At Excessive, the fine rises to $8 per dispute. An individual merchant processing at a 1.2 percent ratio is below the merchant Excessive threshold but may be pushing their acquirer’s portfolio above the 0.5 percent Above Standard level, which means their acquirer starts absorbing fines even before any merchant-level penalty applies. Acquirers pass those fines through. A merchant at 1.2 percent who thinks they are safely below the threshold may find their acquirer imposing reserves or requesting remediation because of the portfolio-level pressure the merchant is creating.

The Mastercard Excessive Chargeback Program

Mastercard’s Excessive Chargeback Program operates on a different fine structure than VAMP. Where Visa applies a per-dispute fee, Mastercard applies monthly flat fines that escalate over time. The longer a merchant stays in the program, the higher the monthly assessment becomes, which means the total cost of non-compliance grows exponentially rather than linearly.

The program has two tiers. The Excessive Chargeback Merchant tier requires 100 to 299 chargebacks in a calendar month and a chargeback-to-transaction ratio of 1.5 to 2.99 percent. The High Excessive Chargeback Merchant tier requires 300 or more chargebacks in a calendar month and a ratio of 3.0 percent or above. Both the count and the ratio must be exceeded simultaneously. A merchant with 150 chargebacks and a 1.2 percent ratio does not enter either tier regardless of chargeback count. A merchant with a 2.0 percent ratio and only 80 chargebacks does not enter either tier regardless of the ratio.

The fine schedule for ECM status begins with a warning in month one, no financial assessment. Month two is when fines begin, starting at $1,000. The assessment climbs to $5,000 per month from months four through six, to $25,000 per month from months seven through eleven, to $50,000 per month from months twelve through eighteen, and reaches $100,000 per month from month nineteen onward. A merchant who enters ECM and cannot bring their ratio below the threshold faces monthly fines that reach six figures if the situation is not resolved within 18 months.

HECM fines escalate faster. Month two starts at $1,000 but accelerates to $10,000 per month for months four through six, $50,000 per month for months seven through eleven, $100,000 per month for months twelve through eighteen, and $200,000 per month from month nineteen onward. Mastercard also adds an Issuer Recovery Assessment from month four onward for HECM merchants: an additional $5 per dispute for every chargeback above the 300-per-month threshold.

Exiting either tier requires staying below the ECM threshold for three consecutive months. There is no partial credit for two months of compliance followed by one month above the threshold.

Why the Acquirer Layer Changes the Calculation

The thresholds published by Visa and Mastercard are the network-level enforcement triggers. They are not the only trigger a merchant faces. Acquiring banks maintain their own internal risk thresholds, which are typically more conservative than the network thresholds, because acquirers are financially liable for network fines across their entire portfolio.

A merchant whose ratio is approaching but has not yet crossed 1.5 percent should expect their acquirer to respond before Visa does. The acquirer’s response may include increasing rolling reserves, tightening processing limits, requiring a remediation plan, or imposing per-transaction holds on high-risk transaction types. All of these consequences arrive before any formal network program enrollment.

This is why the practical risk threshold for most merchants is meaningfully lower than the published network thresholds. An acquirer managing a diverse portfolio to stay below the 0.5 percent VAMP Above Standard level cannot afford to allow individual merchants to run at 1.2 to 1.4 percent without taking action. The published threshold is where network fines begin. The acquirer’s internal threshold is where account consequences begin, and that number is typically lower.

What Each Program Costs Over Time

The cost of being in the Visa VAMP Excessive program is predictable: $8 per disputed or fraudulent transaction for as long as the ratio stays above 1.5 percent. For a merchant receiving 500 disputes per month, that is $4,000 in fines per month on top of the transaction losses themselves.

The cost of being in the Mastercard ECM program is front-loaded with a warning and then escalates steeply. A merchant who enters ECM and takes six months to bring their ratio below the threshold will have paid approximately $11,000 in assessments across months two through six. A merchant who takes 12 months will have paid approximately $186,000. A merchant in HECM who takes 12 months will have paid significantly more.

The remediation timeline matters as much as the remediation actions. Enrolling in chargeback alert networks, tightening fraud controls, and improving fulfillment practices can reduce a ratio over two to three months. A merchant who begins remediation immediately upon entering a program has a materially better financial outcome than one who waits for the acquirer to impose restrictions before acting.

The full picture of how card networks structure their rules, what MATCH list filing obligations exist alongside these monitoring programs, and how the regulatory hierarchy flows from network to acquirer to merchant is covered in the card network rules and risk programs guide. The complete overview of chargeback mechanics, the dispute lifecycle, and the defense strategies available at each stage is in the complete guide to chargebacks.

Frequently Asked Questions

What is the Visa VAMP merchant threshold in 2026?

The Visa VAMP merchant Excessive threshold is 1.5 percent for the US, Canada, EU, Asia Pacific, and Latin America, effective April 1, 2026. The threshold dropped from 2.2 percent, which applied from the April 2025 program launch through March 2026. CEMEA merchants retain the 2.2 percent threshold. A minimum of 1,500 combined fraud reports and disputes per month is required for formal program enrollment.

What does it cost to be in the Visa VAMP Excessive program?

The fine is $8 per fraudulent or disputed card-not-present transaction, effective October 1, 2025. First-time violations within a rolling 12-month window receive a three-month grace period before fines begin. Subsequent violations within the same 12-month window receive no grace period.

What are the Mastercard ECM fine amounts?

Mastercard ECM fines begin at $1,000 per month in the second month of enrollment and escalate monthly. Months four through six: $5,000 per month. Months seven through eleven: $25,000 per month. Months twelve through eighteen: $50,000 per month. Month nineteen onward: $100,000 per month. HECM fines follow a steeper schedule reaching $200,000 per month after 19 months.

How does a merchant exit the Mastercard ECM program?

A merchant exits ECM by maintaining their chargeback count below 100 per month and their ratio below 1.5 percent for three consecutive months. Two months of compliance followed by one month above the threshold resets the exit clock.