Read the State of Fraud Report
Fraud attacks take many forms and inflict different degrees of damage, depending on their size, duration and the solutions a merchant has in place to protect the business from harm. The obvious downside of a fraudulent order is the loss of a sale and the product, possible damage to brand reputation and potential long-term overreaction that leads to future false declines
Like Visa, Mastercard has excessive fraud and chargeback programs aimed at encouraging merchants to keep their fraud and chargeback rates low. Signifyd Compliance Analyst Ron Prichard takes a deep look at Mastercard’s programs and how merchants can avoid them or remove themselves from them, should that become necessary.
But should fraud attacks be frequent and successful enough, there are other consequences as well. Card networks, such as Visa and Mastercard, look to protect themselves with fraud monitoring programs that are structured to encourage merchants to do their best to avoid fraudulent orders. We’ve put together below a list of the most frequently asked questions about Visa’s dispute and fraud monitoring programs.
Q: What is the Visa Dispute Monitoring Program?
A: While merchants are never happy about being notified of chargebacks, a merchant who has a high number of chargebacks may find themselves in Visa’s Dispute Monitoring Program (VDMP). A merchant’s inclusion in this program can become very costly and may eventually lead to the termination of the merchant’s ability to accept Visa payments.
Q: How does Visa decide a merchant’s chargebacks are too high?
A: Visa sets a threshold based on the ratio of chargebacks to total transactions. While the VDMP program officially has two levels, Standard and High Risk/Excessive, Visa also has an early warning system to alert merchants that they are in danger of reaching the chargeback threshold and may be placed in the monitoring program. One note: A merchant might not receive an early warning notification if their dispute rate immediately puts them at the Standard or Excessive levels of the program. Visa calculates dispute rates at the end of each month to determine if a merchant falls into one of the following three categories:
Early warning threshold
At least 75 total disputes and a dispute ratio of .65%.
Standard threshold
At least 100 total disputes and a dispute ratio of .9%.
High risk/excessive
At least 1,000 total disputes and a dispute ratio of 1.8%.
Q: What consequences does a merchant face if they’ve been put in the VDMP?
A: It depends on what level of the program a merchant has been placed.
Early warning notification
No fines are levied. The early warning level is meant to allow merchants to correct issues that might be causing a high rate of chargebacks to help them avoid being officially placed in the VDMP.
Standard level
Merchants are given four months to correct the issue before any fines are levied. After the fourth month, merchants will be charged $50 per dispute. After the ninth month, the merchant will still be charged $50 per dispute, but they might also be charged a $25,000 review fee (does not apply in EU) and they might be required to undergo an audit. After 12-plus months, all previously mentioned fees still apply and Visa might revoke a merchant’s ability to accept Visa payments.
High risk/excessive level
The same fees for the same amounts as the standard level are levied, however, a merchant considered to have an excessive number of chargebacks does not get the same four-month period to correct the issue. The fees will start immediately at month one for merchants unfortunate enough to have found themselves at this level of the program.
Q: How does a merchant get out of the program?
A: In order to get out of the VDMP, a merchant will need to stay below the standard level threshold of .9% for three consecutive months. The key word here is consecutive: If a merchant goes two months below the threshold and in the third month goes above the threshold the three months start over again.
Q: If the VDMP already deals with merchant chargebacks, then what is the Visa Fraud Monitoring Program?
A: Visa Fraud Monitoring Program (VFMP), while similar to the VDMP, is a separate Visa program that specifically looks at handling chargebacks related to fraud.
Q: So how does Visa determine what is fraud related?
A: They do this by analyzing something called TC40 data. TC40 is the name of the report that issuers send to Visa when they believe charges are fraudulent.
Q: How does Visa determine the thresholds for fraud-related chargebacks under the VFMP?
A: It’s actually very similar to the VDMP. However, rather than calculating the chargeback to total transaction count ratio, the calculation is based on the total dollar amount of fraud-related chargebacks to the total dollar amount of legitimate transactions. There is also a minimum threshold of fraud related chargebacks, but it is also based on dollar amount and not a simple count of chargebacks. Visa also calculates fraud rates at the end of each month to determine if a merchant falls into one of the following three categories:
Early warning threshold
Fraud rate of .65% and at least $50,000 in fraud related chargebacks.
Standard threshold
Fraud rate of .9% with at least $75,000 in fraud related chargebacks.
High risk/excessive
Fraud rate of 1.8% with at least $250,000 in total fraud related chargebacks.
Q: What consequences does a merchant face if they are placed in the VFMP?
A: Much like the VDMP, the potential consequences will be based on the level of the program the merchant falls under.
Early warning level
No fines are levied. Like with VDMP, this level is only to warn merchants and give them a chance to bring their fraud rates down to prevent them from having to be officially placed in the program.
Standard level
Same as VDMP, there are no fines levied for the first four months. Then in months five and six, Visa can assess fines of $25,000. In months seven through nine, the fine amount is increased to $50,000 and at ten-plus months the fine is increased again to $75,000.
High risk/excessive
There is no four-month grace period granted, and fines start at the first month. In months one through three, Visa can assess a fine of $10,000. That amount increases to $25,000 for months four through six, then $50,000 for months seven through nine and finally $75,000 for months 10 and beyond.
Q: How does a merchant get themselves out of the VFMP?
A: Like the VDMP the merchant must stay below the standard threshold rate of .9% for three consecutive months. For VFMP Visa may also require the merchant to submit documentation outlining steps taken to remediate their fraud issues.
Q: What is the Visa Fraud Monitoring Program – 3DS?
A: The VFMP-3DS program only applies to merchants in the U.S. who use 3-D Secure. Visa bases their inclusion of a merchant in this program on two factors: the total dollar amount of domestic 3DS payments that are found to be fraudulent (fraud volume) and the ratio of fraudulent payments to the total 3-D Secure domestic payments (fraud rate). If a merchant has a fraud volume over $5,000 and a fraud rate of over .5%, they receive an early warning notification. As with the other programs previously mentioned there is no penalty for the early warning. It’s meant to help the merchant avoid being officially placed in the program.
If the merchant exceeds a fraud volume of $7,500 at a fraud rate of .75% or above, then they are placed in the standard VFMP-3DS program. While there are no fines levied as part of this program, merchants will lose the liability shift for payments using 3ds payment as long as they remain in the program.
Obviously, this alphabet soup of Visa programs — VDMP, VFMP and VFMP-3DS — is unpleasant and potentially costly. But it is also unnecessary. Online fraud will always be with us, but with robust fraud merchant protection from chargeback, it doesn’t have to be detrimental to your business.
Photo by Getty Images
Need help managing or avoiding Visa’s dispute or fraud management programs? We can help.
“When we were Kount customers, our chargebacks were out of control. It got so bad that we had actually been placed on the Visa’s Fraud Monitoring Program and stayed on that program for the last 18 months that we were Kount customers. Kount couldn’t deliver on any of the promises they made. Signifyd helped us dig ourselves out of that hole. Signifyd promised to get us off the Visa Monitoring Program within the first 4 months, and they were actually able to do it in the first month. That's a true partnership we’ll never look back from.”
Chris Trefzger, Director of Customer Experience The Bouqs Company
Latest posts
