Every chargeback costs you the sale, the product, a fee, and a mark against your dispute ratio. But fraud chargebacks don’t all start the same way. Some come from criminals using stolen cards. Others come from your own customers, people who willingly made the purchase and disputed it anyway.
The payments industry calls the first true fraud and the second friendly fraud. The name makes friendly fraud sound harmless. It isn’t. Because the two have different causes, they need different defenses. A tool that stops a stolen card at checkout does nothing against a real customer who forgot about a renewal or is looking to scam a merchant.
Two Kinds of Fraud, One Chargeback
True fraud (aka, third-party fraud)
True fraud happens when someone other than the cardholder uses the card without permission. The number may have been stolen in a breach, skimmed, phished, or bought online, or a fraudster may have opened accounts with a stolen identity. The cardholder sees a charge they never made, and their bank files a fraud chargeback.
Friendly fraud (aka, first-party fraud)
Friendly fraud happens when the purchase was real, but the cardholder disputes it anyway. It usually takes one of four forms:
Family fraud: A child or spouse uses a saved card without asking.
Unrecognized purchases: The customer doesn’t recognize your descriptor or forgot a renewal.
Buyer’s remorse: A dispute feels easier than contacting the merchant.
Intentional abuse: The customer keeps the goods and claims fraud or non-delivery.
In true fraud, you and the cardholder are both victims. In friendly fraud, the cardholder is the problem. Friendly fraud is also harder to catch: the order passes AVS, CVV, and fraud screening because it is legitimate, and it only turns into a dispute later.
Why It Matters More Under VAMP
Visa’s Acquirer Monitoring Program (VAMP) combines issuer fraud reports (TC40s) and chargebacks (TC15s) into one ratio against your card-not-present sales. In the U.S., Canada, Europe, and Asia Pacific, the Merchant “Excessive” threshold dropped to 1.50% on April 1, 2026. A friendly fraud dispute filed as “fraud” can count twice in your VAMP numerator, once as a TC40 and once as a chargeback. Whether it started with a criminal or a customer, it pushes you toward the threshold.
Part 1: Reducing True Fraud
True fraud is stopped at checkout: block the stolen card before approval, or shift liability away from you when one gets through.
1. Use 3-D Secure. Visa Secure, Mastercard Identity Check, Amex SafeKey, and Discover ProtectBuy let the issuer authenticate the cardholder. Most good customers pass invisibly, and only orders assessed as risky get a passcode or biometric check. Authenticated transactions generally shift fraud liability to the issuer.
2. Require AVS and CVV2. Neither is perfect, but together they block low-effort fraud and feed your fraud rules. Set clear rules for mismatches.
3. Add real-time fraud screening. Score orders on device fingerprint, IP and proxy detection, email age, velocity, and on-site behavior. Keep tuning your rules.
4. Stop card testing. Protect checkout with bot detection, velocity limits, and blocks on repeated declines. Visa tracks an enumeration ratio under VAMP, so card testing alone can trigger monitoring.
5. Vet your traffic sources. Fraud waves often trace to one affiliate, campaign, or landing page. Track fraud by source and pause bad sources quickly.
6. Act on fraud alerts. Ethoca (Mastercard) and Verifi (Visa) alerts can notify you of fraud so you can refund and stop shipment before a chargeback. Under VAMP, a refund of a mitigation alert will most likely stop the chargeback but not the TC40.
7. Accept true fraud chargebacks, and learn from them. Fighting real fraud rarely wins. Accept it, find how the fraudster got through, and close the gap.
Part 2: Reducing Friendly Fraud
Friendly fraud is stopped after the sale: help customers recognize the charge, make contacting you easier than disputing, and give issuers evidence to reject bad claims.
1. Use a clear billing descriptor. Show the brand customers know plus a phone number or website. Use dynamic descriptors if you sell multiple brands.
2. Use Visa Order Insight. Verifi’s Order Insight shows the issuer and cardholder your order details, often while the cardholder is reviewing the charge. Many recognize the purchase and drop the dispute. As of April 2026, it also supports Compelling Evidence 3.0.
3. Enroll in Ethoca Consumer Clarity. Mastercard’s equivalent puts your logo, receipts, and order details inside participating banking apps and call-center screens.
4. Use Visa Compelling Evidence 3.0 (CE3.0). When a cardholder claims fraud, submit two prior undisputed transactions on the same card, 120 to 365 days old, matching on at least two data elements, one of which must be IP address or device ID. If it qualifies, liability shifts to the issuer and the dispute is excluded from your ratios.
5. Use Mastercard First-Party Trust. Share device, delivery, and identity data through Identity Check Insights or Ethoca Consumer Clarity. Mastercard matches it against two prior transactions; if it qualifies, liability shifts to the issuer and the chargeback can be excluded from your ratios.
6. Resolve disputes early. As with true fraud, Ethoca and Verifi alerts can be refunded before a transaction becomes a chargeback and counts against your ratio. While there is still a refund to the customer, a chargeback is prevented.
7. Be transparent about subscriptions. Visa and Mastercard require clear trial terms, explicit consent, a reminder before a trial converts, and easy online cancellation. Send reminders and receipts for every charge.
8. Make refunds easier than disputes. Publish your phone, email, and chat, and answer fast.
9. Prove delivery and use. Use tracking and signature confirmation for physical goods. For digital products, log logins and downloads with timestamps, IP addresses, and device IDs.
10. Keep records and fight what you can win. Save terms, checkbox consent, receipts, and customer messages. Represent clear friendly fraud with strong evidence, and block repeat disputers.
The Missing Piece: Seeing Problems Early
Every tool above works better when you know where your fraud and disputes come from while there’s still time to act. Most merchants find out too late: processor reports arrive weeks after month-end, fraud reports and chargebacks live in different systems, and nothing ties them back to the campaign or product behind them.
SLYCE360 closes that gap. You’ll know right away whether you’re facing a true fraud attack that needs tighter screening, or a friendly fraud pattern that needs a clearer descriptor, a better cancellation flow, or some other process improvement.
True fraud and friendly fraud need different defenses. Knowing which one you’re facing, early, is the difference between fixing a problem and paying for it.