Definition
A chargeback lets a cardholder, through their issuing bank, dispute a card transaction and obtain an automatic refund — before the merchant has even had a say.
Governed by the card networks (Visa, Mastercard, CB, Amex), it is a very strong consumer protection, often stronger than civil law, but a major economic risk for e-commerce merchants.
The full cycle
The key steps: the cardholder disputes with their bank, the issuer assigns a reason code (e.g. Visa 10.4 "fraud — card-not-present"), the merchant is debited immediately, then can attempt a representment (provide evidence). If declined, the case moves to pre-arbitration then arbitration, the final paid recourse settled by the network.
The main reasons
- Fraud (Visa 10.4 / Mastercard 4837 for card-not-present, Visa 10.5 for card-present): covered by liability shift if 3DS2 was used.
- Consumer dispute: goods not received (13.1), not as described (13.3), credit not processed (13.6), subscription not cancelled (13.2). Not covered by liability shift — the merchant remains liable.
- Processing errors: double billing, incorrect amount or currency. The merchant has every interest in accepting quickly.
The deadlines
- Cardholder: ~120 days after the transaction (up to 540 days for a subscription or a future non-delivery).
- Merchant: 7 to 30 days to respond, depending on network and reason.
- Pre-arbitration: 30 days; network arbitration: several weeks.
The costs for the merchant
Beyond the refunded amount:
- Chargeback fees: €15 to €50 charged by the PSP, not refunded even if you win.
- Arbitration fees: €250 to €500 in case of escalation.
- Network penalties: above a chargeback threshold (~0.9% Visa, 1.0% Mastercard), the merchant enters a monitoring programme (VAMP, EFM, MATCH), with monthly penalties and the risk of expulsion.
- Operating costs: a disputes team, tools (Verifi CDRN, Ethoca Alerts).
Merchant-side tools
- Verifi CDRN (Visa) / Ethoca Alerts (Mastercard): an alert before official issuance, with the option to refund directly.
- Order Insight (Visa) / Consumer Clarity (Mastercard): transmit merchant details to the issuer to reduce "I don't recognise this" disputes.
- PSP fraud tools: Stripe Radar, Adyen RevenueProtect, Riskified, Signifyd block upstream.
- 3DS2: shifts fraud liability to the issuer.
Friendly fraud
This is now the leading chargeback fraud: the cardholder really did make the transaction but disputes it to get their money back (regret, a child's purchase, malice). Estimated at 40–80% of chargebacks depending on the sector. 3DS2 offers no protection against it (the transaction was authorised): only evidence in representment (signed delivery, consistent IP, history) can counter it.
Chargeback ratio and network programmes
| Network | Programme | Threshold | Consequence |
|---|---|---|---|
| Visa | VAMP | 0.65% - 0.9% | Monthly penalties |
| Mastercard | EFM (Excessive Fraud Merchant) | 1% by value | Penalties, suspension |
| Mastercard | ECM (Excessive Chargeback Merchant) | 1.5% by volume | Progressive penalties |
| All | MATCH list (TMF) | Expulsion | Multi-acquirer ban |
A merchant placed on the MATCH list (Terminated Merchant File) will find no acquirer for 5 years — the sword of Damocles of e-commerce.
What a chargeback is not
- Not a refund: a refund is voluntary; a chargeback is imposed via the network.
- Not a civil dispute: the network rules according to its own rules, not civil law.
- Not universal outside card: in SEPA (SDD), a similar mechanism exists (R-transactions); in SCT, almost no recourse.
- Not reciprocal: only the cardholder can initiate it, never the merchant.
In the PSD2 ecosystem
The chargeback is the major consumer tool of card payment. Combined with the liability shift of 3DS2, it sets the economic balance between cardholder, merchant and issuer. Its heaviness explains the appeal of alternative payments (Pay by Bank, Wero), with no chargeback — an asset for the merchant, but a brake on the cardholder side (less perceived protection).
Real-world examples
- Roblox friendly fraud: a parent disputes €50 as "unauthorised", the merchant provides proof of account use — a long battle, often lost.
- Non-delivery: a Cdiscount customer did not receive their parcel (reason 13.1); with a La Poste signature proof in hand, the merchant generally wins.
- Netflix subscription: a customer forgets to cancel, sees €12.99 charged (13.2); Netflix produces the "no cancellation" logs.
- MATCH programme: a dropshipper reaches 2% chargebacks, is placed on the MATCH list, and all PSPs refuse them — a forced shutdown.
- Stripe Chargeback Protection: covers friendly fraud on 3DS transactions for ~0.4% of volume.
- Verifi RDR: a Visa offering that automatically refunds small amounts to avoid the formal chargeback.
- Apple Pay: ~90% fewer chargebacks than a keyed-in card (DPAN + biometrics combo).
- Pay by Bank (PIS): no chargeback — hence the appeal of Fintecture, Bridge or Brite on high-value baskets (real estate, automotive).