THE GUIDE

A card payment isn't final for 120 days.

The customer has a superpower the merchant doesn't: one phone call to their bank can pull the $100 back. This is the chargeback — payments' built-in undo button, and the most expensive thing merchants don't understand.

SCROLL ↓
IN PLAIN WORDS — READ THIS FIRST

A card payment isn't done when the terminal beeps. For up to 120 days the customer can call their bank, say "I don't recognize this," and the bank pulls the money straight back out of the shop's account. That reversal is the chargeback — the card's built-in undo button.

It exists so people trust cards, and the merchant pays for that trust. A disputed $100 sale often costs a shop two to three times that once you add the fee, the lost product and the staff time. Follow it through Marta's café, then see how fighting a dispute actually works and where it goes wrong.

PART 01

The dispute, replayed.

Three months after Marta’s café sold a $100 order, the cardholder tells their bank "I don't recognize this charge." Watch the $100 travel backwards — and notice Marta is the last to know.

PART 02

Who actually eats the loss?

Four crime scenes, one question: who could have stopped it? That’s the whole liability rule — the loss lands on whoever skipped the defense they had. Watch it decide four cases:

CASE 1 · STOLEN CARD, ONLINE

Merchant eats it

Card-not-present fraud defaults to the merchant — they accepted a card they couldn't physically inspect. They lose the $100 and the product, then pay a fee on top. This is why online stores obsess over fraud screening.

CASE 2 · COUNTERFEIT CARD, IN STORE

Issuer eats it (usually)

If the merchant used a chip reader, the issuer absorbs counterfeit losses. Since the 2015 EMV liability shift, a merchant still swiping magstripes takes the loss instead — that's how the US got chips: not by law, by liability.

CASE 3 · "FRIENDLY" FRAUD

Merchant eats it — and it's the biggest slice

The customer did buy it — then disputed anyway. Forgot the subscription, regretted it, or their kid bought v-bucks. Industry estimates put friendly fraud among the largest slices of disputes by volume. The undo button gets abused.

CASE 4 · MERCHANT GOES BUST

Acquirer eats it

Airline collapses, customers charge back a year of tickets, and the merchant's account is empty. The acquiring bank pays — this is why acquirers underwrite merchants like lenders and hold reserves on risky ones.

The words, one at a time.

Six terms run every dispute. Learn these and a chargeback notice stops being a panic and becomes a checklist.

Chargeback
the bank's forced reversal
The customer's bank pulls a completed payment back out of the merchant's account after the customer disputes it.
Marta's café loses the $100 plus a ~$25 fee three months after the sale, with no hearing first.
Why it matters: it's the card's undo button, and the merchant is the last party to find out.
Reason code
why the bank says it's disputed
A code that labels the dispute and decides which evidence can win it. Each network has its own set.
Visa 10.4 = fraud, card absent. Visa 13.1 = goods not received. Mastercard 4837 = fraud.
Why it matters: you fight a 10.4 completely differently from a 13.1. The code is step one.
Provisional credit
the customer gets paid first
The issuer usually refunds the cardholder right away, before the merchant has even responded to the dispute.
The customer sees +$100 back the same day. Marta hears about it weeks later.
Why it matters: the money moves first and the questions come later — the opposite of a court.
Representment
re-presenting the sale with proof
The merchant's evidence package, sent to overturn the dispute. You literally re-present the transaction.
Proof of delivery to the AVS-matched address, plus a 3-D Secure authentication record.
Why it matters: without strong evidence, merchants win only about one in five.
Friendly fraud
a real buyer who disputes anyway
The customer did buy it, then charged back — a forgotten subscription, buyer's regret, or a family member.
A child's in-game purchase gets disputed by the parent as "I don't recognize this."
Why it matters: it's the biggest slice of disputes by volume, and the hardest to prevent.
Arbitration
the network as final judge
If both sides still disagree, the network rules like a private court and the loser pays the filing fee.
The fee is $500 (Visa) or $575 (Mastercard), so nobody arbitrates a $100 sale.
Why it matters: the system is built to make you let go of small disputes rather than fight forever.
PART 03

The real bill.

A lost $100 dispute doesn't cost $100. The industry rule of thumb is 2–3× the transaction:

~$25
chargeback fee, win or lose
1.5%
dispute ratio where Visa's monitoring program (VAMP) classes a US/Canada/EU/AP merchant "excessive" since Apr 2026 — fines follow
~20%
typical merchant win rate without good evidence
$500–575
arbitration fees at the network (Visa $500, Mastercard $575) — loser pays

The hidden franchise rule: dispute too often and the network can fine your acquirer or expel you from card acceptance entirely. For a small business, losing card acceptance is a death sentence — which is why acquirers fire risky merchants first.

DISPUTE LOSS STATEMENT
REASON 10.4 · FRAUD, CARD ABSENT
SALE REVERSED−$100.00
CHARGEBACK FEE−$25.00
PRODUCT (GONE)−$60.00
STAFF TIME ~2.5 HRS−$50.00
TRUE COST−$235.00
2.35× THE ORIGINAL SALE
ORIGINAL SALE  $100.00
MERCHANT WIN RATE (NO EVIDENCE)  ~20%
WHEN IT BREAKS

How fighting a dispute goes wrong.

The dispute itself is the failure. What surprises merchants is the ways the fight goes sideways. Three of them, then a tree for the real question: a chargeback just landed — how do you actually fight it?

FAILURE 01 · THE DOUBLE REFUND
You pay for it twice
WHAT YOU SEEYou refund an unhappy customer to be nice, then still lose the chargeback they'd already filed.
WHYA refund does not cancel an open dispute. If a chargeback already exists, refunding on top means the money leaves twice — once as the refund, once as the reversal.
THE FIXRefund fast, or fight — never both. Before issuing any refund, check whether a dispute is already open on that transaction.
FAILURE 02 · THE RATIO TRAP
A slow month gets you fined
WHAT YOU SEEYour dispute count is falling, yet the network flags you as "excessive" and threatens fines.
WHYVisa's VAMP (and Mastercard's programs) judge a ratio, not a count. The 1.5% "excessive" line for many regions is disputes divided by sales — so a sales dip shrinks the denominator and pushes you over.
THE FIXWatch the ratio, not the raw number. A quiet sales month is a danger month for the ratio.
FAILURE 03 · THE MISSED CLOCK
You auto-lose on time
WHAT YOU SEEA dispute you could have won is marked lost before you even submitted evidence.
WHYThe response window is short (often 20–30 days), and your PSP's portal deadline is usually tighter than the network's. Miss it and the case forfeits automatically.
THE FIXTreat the portal date as the real deadline and respond early. Automate the alert so a dispute never ages out unseen.
A DISPUTE LANDED. HOW DO YOU FIGHT IT?
1 · Is it a fraud code? (Visa 10.x · Mastercard 4837)
HARD WITHOUT 3DS / CE3.0Fraud codes rarely win without a 3-D Secure record or Compelling Evidence 3.0. Feed the issuer identity history — two prior undisputed orders matching IP or device. No evidence? Auto-accept the small ones.
NOT FRAUD — KEEP GOINGProcessing or authorization code? Go to step 2.
2 · Is it a processing / authorization code? (Visa 11.x · 12.x)
WIN WITH RECORDS, OR LOSE DESERVEDLYThese turn on facts: the auth log, the correct amount, timely presentment. If your records are clean you win; if the error is real it's indefensible. Usually preventable hygiene.
CONSUMER DISPUTE — KEEP GOINGGo to step 3.
3 · Is it a consumer dispute? (13.1 not received · 13.3 not as described · 13.2 cancelled recurring)
FIGHT WITH THE RIGHT PROOF13.1 and 13.3: delivery proof to the AVS address, photos, a clear policy. 13.2: your cancellation records. First ask whether fighting costs more than the loss — if so, accept and move on.
STILL UNSURERead the exact code and clock in your PSP portal, and triage by family before spending a minute on narrative.
COMMON QUESTIONS — ASKED PLAINLY

The things merchants actually ask.

Five questions from the other side of the counter.

CAN A CUSTOMER CHARGE BACK ANYTHING THEY WANT?
Nearly. The customer only has to tell their bank they don't recognize a charge or didn't get what they paid for, and the bank opens a dispute and usually credits them first. There's no proof required up front. The check comes later, when the merchant sends evidence and the issuer decides. That imbalance is deliberate — cards are trusted because the customer is protected by default. The cost of that trust lands on merchants, which is why fraud screening and good records matter so much.
I ALREADY REFUNDED — WHY AM I STILL LOSING THE DISPUTE?
Because a refund and a chargeback are two separate money movements. If the customer filed a dispute and you then refunded, the refund went out and the chargeback still pulls the money back too — you're out twice. Refunding does not close an open dispute. The rule: decide early. Either refund quickly, before any dispute exists, or fight the dispute with evidence. Doing both is how a $100 problem becomes a $200 one.
WHAT'S THE DIFFERENCE BETWEEN A REFUND AND A CHARGEBACK?
A refund is you choosing to give the money back — quick, cheap, no penalty. A chargeback is the customer's bank forcing the money back over your head, with a fee attached and a mark against your dispute ratio. Same money returned, very different cost. A big part of dispute management is simply making refunds easy enough that customers never reach for the chargeback, which is the expensive path for everyone.
DO I GET THE CHARGEBACK FEE BACK IF I WIN?
Usually not. The ~$25 fee is charged when the dispute is filed and typically stays lost even when you win the case and recover the sale amount. That's why fighting tiny disputes rarely pays: you can win the $100 and still be down the fee and the staff time. The professional move is triage — auto-accept the disputes too small to be worth the fight, and put your effort into the ones where the numbers and the evidence are on your side.
HOW DO I STOP GETTING CHARGEBACKS IN THE FIRST PLACE?
Prevention beats representment every time. The big levers: a clear billing descriptor so customers recognise the charge on their statement, fast and obvious refunds, delivery tracking to the AVS address, 3-D Secure on risky online orders, and cancellation flows that actually cancel. For subscriptions, a reminder before each renewal kills a lot of "I forgot" disputes. Most friendly fraud is a customer who couldn't remember or couldn't reach you — remove those two frictions and the ratio falls.
FIELD NOTES — THE PRO LAYER

For the professionals.

Enough to actually work a dispute queue — codes, clocks, evidence, and the programs that fine you.

REASON-CODE FAMILIES — FOUR KINDS OF GIVE-IT-BACK
Every Visa dispute carries a condition code in one of four families — and the family decides your defense:
10.x FRAUD — 10.4 card-absent fraud is most of a CNP merchant's queue
11.x AUTHORIZATION — no auth, declined auth, expired card
12.x PROCESSING ERROR — wrong amount, duplicate, late presentment
13.x CONSUMER DISPUTE — not received (13.1), not as described (13.3), cancelled recurring (13.2)
Mastercard's equivalents: 4837 (fraud), 4853 (cardholder dispute — it absorbed most others), 4808 (authorization). The 11.x and 12.x families are process hygiene — preventable, and indefensible when true. The 10.x and 13.x families are the contested ground where evidence matters. Triage by family before anything else.
THE CLOCK — WHO MUST MOVE, BY WHEN
Cardholders get 120 days from the transaction (or from expected delivery — pre-orders extend the clock). Once a dispute lands, the merchant side typically has 20–30 days to respond with representment — and your PSP's portal deadline is shorter than the network's; miss it and you auto-lose. Then: issuer review → pre-arbitrationarbitration, where the network rules and the loser pays the filing fee (Visa $500, Mastercard $575 — verified Jun 2026), which is why almost nothing under four figures goes the distance. End to end, a fought dispute runs 45–120 days. One expensive subtlety: refunding after a dispute exists doesn't kill the dispute — you can lose the money twice. Refund fast, or fight; never both.
COMPELLING EVIDENCE 3.0 — THE FRIENDLY-FRAUD REMEDY
Since 2023, for 10.4 card-absent fraud only: show two prior undisputed transactions from the same identity, 120–365 days before the disputed one, matching on at least two elements of user ID, IP address, shipping address, device ID — one of the two must be IP or device ID — and fraud liability flips to the issuer, ideally before the chargeback even files (via Order Insight pre-dispute lookups answered in ~2 seconds). Translation for builders: if you aren't logging device IDs and IPs against orders, you are discarding your best evidence. Visa is expanding the remedy's application effective 24 Oct 2026 (per current rule releases) — the identity data you keep now pays off all next year.
REPRESENTMENT — WHAT EVIDENCE ACTUALLY WINS
Evidence strength, descending: proof of delivery to the AVS-matched address (with signature, ideally); 3DS authentication (an authenticated transaction should never have been coded 10.4 at all); CE3.0 identity history; device/IP linkage to prior purchases; usage evidence for digital goods (logins after purchase); clearly-accepted refund policy for 13.3s. Weak: generic terms-of-service screenshots, 'the customer is lying' narratives, anything an analyst can't read in 30 seconds. Win rates are structurally lopsided — fraud codes are hard to win without CE3.0 or 3DS; processing-error codes you win with records or lose deservedly. Run the queue as triage: auto-accept tiny disputes (fighting costs more than losing), fight 13.1/13.3 with delivery proof, feed 10.4s the identity data.
VAMP & MONITORING — WHEN THE NETWORK COMES FOR YOU
Above individual disputes sits portfolio surveillance. Visa's VAMP (which replaced the legacy fraud/dispute programs in Apr 2025) tracks a combined fraud + non-fraud dispute ratio; the merchant 'excessive' threshold tightened to 1.5% for US/Canada/EU/AP on 1 Apr 2026 (verified Jun 2026), with enumeration attacks measured separately. Mastercard's excessive-chargeback tiers (ECM/HECM) sit at roughly 1.5%/3% with escalating fines. Consequences run from remediation plans to per-dispute fines to termination plus MATCH-listing. Professionals watch the ratio, not the count — a volume dip can push you over the line while your dispute count falls. Your denominator is a risk metric.
NOT ALL RAILS HAVE AN UNDO BUTTON
Chargebacks are a card-network consumer right, not a law of nature. ACH has returns instead — R-codes with short windows (consumer unauthorized: 60 days; business accounts: 2 banking days). Wires and RTGS payments are final, full stop. Instant rails (UPI, Pix, SEPA Instant) are push-and-final, with fraud handled by reimbursement rules bolted on afterwards (the UK's mandatory APP reimbursement, Pix's MED mechanism) rather than by transaction reversal. On-chain payments (see crypto rails) are finality taken to its logical conclusion. The product question every fintech eventually faces: is an undo button a feature or a fraud vector? Cards answered one way; everything built since answered the other.
PART 04

Remember three things.

1
Chargebacks are a feature, not a bug. Consumer trust in cards exists because of the undo button. Merchants pay for that trust — it's priced into interchange.
2
Liability follows the weakest link. Whoever could have prevented the fraud — and didn't use the available tool (chip, 3DS) — eats the loss. Every security mandate in the card world was driven by a liability shift, not a regulation.
3
Reversibility is the rail's personality. Cards: 120 days of undo. ACH: ~60 days for consumers, ~2 days for businesses. Wires: none. Instant rails (UPI, Pix): the payment itself is final — dispute and reimbursement processes exist (India's NPCI UDIR, Pix's MED), but there's no built-in reversal. Pick a rail, pick your risk.

Everything so far happened inside one country’s ledgers. Next, the $100 has to cross an ocean — and it will not arrive whole.