Friendly Fraud: What It Is and What to Do About It
Friendly fraud is the situation every card-not-present merchant eventually faces: a customer completes a purchase, receives the goods or services, and then contacts their issuing bank to dispute the charge. The bank reverses the transaction, the merchant loses both the product and the revenue, and the customer walks away with both the goods and a refund.
The name is misleading. There is nothing friendly about it. The term comes from the fact that the fraud is committed by an actual customer rather than a criminal using stolen card credentials. The customer is the legitimate cardholder. That is what makes it structurally different from third-party fraud and significantly harder to defend against using the same tools.
Estimates from dispute analytics providers consistently place friendly fraud at 60 to 80 percent of all card-not-present chargebacks. Visa’s own data from its 2025 Global eCommerce Payments and Fraud Report puts first-party misuse at approximately 20 percent of all fraudulent disputes globally, rising to around 30 percent for high-volume online merchants. Juniper Research, publishing in June 2026, projects friendly fraud growing from 22 percent of all chargebacks in 2026 to 28 percent by 2031, reaching a transaction value of approximately $16 billion. The methodologies behind each figure differ, but the directional agreement is consistent: friendly fraud is the dominant dispute type in card-not-present commerce and it is growing.
Why Friendly Fraud Is Increasing
Three structural shifts explain most of the growth.
The chargeback system’s legal foundation makes this easy. The Fair Credit Billing Act, which governs how credit card disputes work in the US, gives cardholders the right to dispute any charge within 60 days of the statement date, with the issuer making the first-instance determination rather than an independent party. The FTC’s guidance on using this right is published at consumer.ftc.gov. The practical result is that a cardholder can file a dispute in under two minutes through a bank app, receive provisional credit the same day, and leave the merchant to prove the transaction was legitimate. The barrier to initiating a dispute has effectively disappeared.
The normalized acceptance of disputes as an alternative to refunds is a documented cultural shift. Research cited in Chargebacks911’s 2026 Chargeback Field Report found one in five consumers admit to having filed a dispute on a legitimate purchase. A separate finding puts 72 percent of cardholders viewing chargebacks as an acceptable alternative to merchant refunds. What was once considered an abuse of the dispute system is increasingly treated as a standard consumer tool.
High-risk and restricted verticals face compounding pressure because their customer relationships carry less friction to begin with. A supplement brand, a subscription service, or a digital goods seller has customers who are more likely to dispute a charge they regret or do not recognize than a customer who walked into a physical store and handed over cash. The dispute system’s design, which defaults to protecting the cardholder, applies equal weight to a $200 supplement order that was delivered as described and a $200 fraudulent transaction on a stolen card.
The Two Types of Friendly Fraud
Not all friendly fraud is intentional. The distinction matters for how merchants approach defense and prevention.
Unintentional friendly fraud happens when a cardholder does not recognize a charge on their statement, contacts their bank, and disputes it without first attempting to contact the merchant. A subscription billing under a company name different from the product name they remember, a charge from a parent company rather than the brand they ordered from, or a statement descriptor that looks unfamiliar all generate disputes from customers who may have genuinely forgotten or not recognized the purchase. This category is defensive through clarity: a billing descriptor that matches the brand name the customer knows, a recognizable customer service number on the statement, and a clear receipt email all reduce unintentional disputes before they are filed.
Intentional friendly fraud is deliberate misuse of the dispute system. The cardholder knows they authorized the transaction, knows they received the goods or services, and files a dispute anyway. Motivations include buyer’s remorse, an unwillingness to go through a return process, a desire to receive goods for free, or in some cases an organized pattern of disputing purchases across multiple merchants. This category requires evidence at the point of sale and a willingness to contest disputes through representment.
The Evidence That Wins Friendly Fraud Disputes
The reason friendly fraud is winnable at meaningful rates, unlike criminal fraud where the cardholder genuinely did not authorize the transaction, is that the cardholder did authorize and receive the order. That interaction generates a trail of evidence that did not exist in the criminal fraud scenario.
Device fingerprint and IP address captured at the time of checkout are among the strongest evidence types. They establish that the same device the cardholder uses regularly placed the order from a recognizable location. When combined with a logged acceptance of terms of service, they demonstrate that a real person knowingly completed the purchase.
Delivery confirmation to the billing address, with carrier tracking and in some cases signature confirmation, addresses the not-as-received claim directly. For digital goods and services, access logs showing the account was logged into, the content was downloaded, or the service was used after the purchase date are the equivalent.
Customer communication records are often underestimated as evidence. An email exchange in which the customer asked a product question after the purchase, a customer service ticket opened after delivery, or a review submitted by the same cardholder all demonstrate that the customer received and engaged with the order.
For subscription businesses specifically, documented evidence that the customer agreed to recurring billing terms at the time of signup, a clear cancellation mechanism that was not used, and confirmation that the cancellation was not requested before the disputed billing date address the canceled recurring claim directly.
Visa’s Compelling Evidence 3.0 framework, which applies specifically to code 10.4 disputes, creates a formal mechanism for winning friendly fraud cases by demonstrating that the same cardholder completed at least two prior undisputed transactions with the merchant using the same device and customer profile in the 120 days before the disputed transaction. Merchants who build transaction history data and store device fingerprints and IP addresses at the time of each transaction can use CE 3.0 to shift liability back to the issuer on qualifying disputes. The detailed mechanics of compiling and submitting that evidence package are covered in the compelling evidence guide coming in this cluster.
What Merchants Get Wrong About Friendly Fraud Defense
The most common mistake is treating friendly fraud as a post-dispute problem rather than a pre-sale documentation problem. A merchant who does not capture device fingerprints, does not log terms acceptance, and does not send a clear post-purchase receipt has no evidence to contest a dispute with, regardless of how legitimate the transaction was. The evidence has to be built at the point of sale, not reconstructed after the dispute notification arrives.
The second common mistake is not contesting disputes at all. Merchants who write off friendly fraud as a cost of doing business without contesting any disputes miss two consequences. The first is direct revenue loss: merchants who fight disputes with strong evidence win 40 to 60 percent of friendly fraud cases per published 2026 benchmark data. The second is ratio impact: every uncontested chargeback counts against the VAMP and ECM ratios regardless of whether the merchant chose to fight it.
The third mistake is applying blanket policies that treat all disputes the same way. A genuine criminal fraud dispute requires different documentation than a friendly fraud dispute, and a not-received claim requires different evidence than a not-as-described claim. Mapping the evidence to the specific reason code on each dispute is the mechanical step that determines whether representment succeeds.
The Fraud Prevention Connection
The complete guide to chargebacks covers how chargeback ratios are calculated, what happens when they breach network thresholds, and the full dispute lifecycle from notification through arbitration.
The fraud prevention section of this site covers the upstream controls, including device fingerprinting, velocity rules, and 3D Secure authentication, that reduce the volume of disputes before they are filed. Those controls serve double duty: they prevent criminal fraud and they generate the evidence trail that wins friendly fraud disputes after the fact. A merchant with strong fraud controls generates better evidence as a byproduct of running them. A merchant with weak fraud controls faces more disputes and has less evidence to contest each one with.
The fraud prevention hub covers those tools in detail. The compelling evidence guide coming in this cluster covers how to compile and structure the specific evidence packages that win 10.4 and 4837 disputes.
Frequently Asked Questions
What is friendly fraud in payment processing?
Friendly fraud occurs when a cardholder who authorized and received a purchase disputes the charge with their issuing bank. The bank reverses the transaction and the merchant loses both the product and revenue. Unlike third-party fraud where a criminal uses stolen card credentials, friendly fraud is committed by the actual cardholder, which makes it harder to prevent at the authorization stage and requires different evidence to contest.
How common is friendly fraud in 2026?
Estimates from dispute analytics providers place friendly fraud at 60 to 80 percent of all card-not-present chargebacks. Visa’s 2025 Global eCommerce Payments and Fraud Report estimates first-party misuse at approximately 20 percent of all fraudulent disputes globally, rising to around 30 percent for high-volume online merchants. Chargebacks911’s 2026 Chargeback Field Report found 83.4 percent of enterprise merchants reported an increase in friendly fraud.
Can merchants win friendly fraud chargebacks?
Yes. Published 2026 benchmark data shows win rates of 40 to 60 percent for friendly fraud disputes where merchants hold strong transaction evidence. The evidence that wins these disputes includes device fingerprint and IP address captured at checkout, delivery confirmation, post-purchase customer communication records, and documented terms of service acceptance. Visa’s Compelling Evidence 3.0 framework provides a formal mechanism for winning 10.4 disputes by demonstrating prior undisputed transactions from the same cardholder on the same device.
What is the difference between intentional and unintentional friendly fraud?
Unintentional friendly fraud happens when a cardholder does not recognize a charge and disputes it without first contacting the merchant, often because the billing descriptor does not match the brand name they remember. Intentional friendly fraud is deliberate misuse of the dispute system by a cardholder who knows they authorized the transaction and received the goods. Both require different prevention approaches: clarity and communication reduce unintentional disputes, while evidence at the point of sale and representment address intentional ones.
Related posts
- Card Network Chargeback Thresholds Explained
Visa VAMP and Mastercard ECM have different thresholds, formulas, and fine structures. Here is exactly what each program does when you breach it.
- Chargeback Fees and How They Compound
A chargeback fee is the smallest cost in a dispute. Here is every layer of cost that stacks on top of it and how they compound over time.
- Chargeback Insurance: Is It Worth It?
Chargeback insurance is mostly a fraud guarantee in disguise. Here is what it actually covers, what it does not, and when the math works.