VAMP threshold: 1.5% since April 1, 2026
Chargeback prevention for Shopify in 2026.
By Adrien Bokor, founder of RefundSentry · Last reviewed
Visa's VAMP threshold for merchants fell from 2.2% to 1.5% on April 1, 2026, and Shopify can hold part of your payouts in reserve when it sees more risk, without publishing a number. This page is the four-layer playbook: what each layer catches, where RefundSentry fits, and the chargebacks you can see coming before they are filed.
ExampleA made-up chargeback, #3688, disputed as never received: the pack RefundSentry prepares for it.
1.5%Visa's VAMP threshold for merchants since April 1, 2026, down from 2.2%.Visa VAMP, per Stripe and the MRC
1,500fraud reports and disputes a month, the count from which VAMP treats a merchant as excessive.Stripe: dispute monitoring programs
$15Shopify's chargeback fee in the US, returned with the amount if you win.Shopify Help Center
Definition
What chargeback prevention actually means
Chargeback prevention is everything that stops a card dispute before it is filed, or takes it out of the ratio the card networks count. It is not the same as recovery, answering a chargeback once it lands. Prevention protects your ratio. Recovery can win back the money on one order, and Visa still counts the dispute.
Prevention vs deflection vs recovery
Prevention stops the risky order before it ships: checkout screening, 3-D Secure, holding the order of a customer you blocked. Deflection catches a complaint that already reached the buyer's bank and refunds it before it becomes a chargeback: Verifi Order Insight, Rapid Dispute Resolution and CDRN, Ethoca alerts. Recovery answers the chargeback after it lands, with evidence.
The order matters. A non-fraud dispute resolved through an alert leaves Visa's VAMP count. For a fraud dispute, the fraud report stays in the ratio unless the case qualifies under Visa's Compelling Evidence 3.0, which removes both. Any other chargeback you win still counts.
The thresholds
The 2026 chargeback math
Three rule sets, three thresholds. Shopify's own has no published number.
- Visa VAMP
- 1.5%Since April 1, 2026 in the US, Canada, Europe, Asia Pacific and Latin America; 2.2% in Central Europe, the Middle East and Africa. The ratio is fraud reports plus disputes over card-not-present sales. A merchant counts as excessive from 1,500 a month, and pays $8 per fraudulent or disputed transaction.
- Mastercard ECM
- 1.5%From 100 chargebacks a month. The high tier, HECM, starts at 300 chargebacks and 3%.
- Shopify Payments
- None publishedShopify says it holds stores to a higher standard than the card networks, and can put a reserve on your payouts when an assessment finds more risk.
LexisNexis's 2025 True Cost of Fraud study puts the full cost to US merchants at $4.61 for every $1 of fraud. The full cost of a chargeback
The six types
The six types of chargebacks Shopify merchants see
Each has its own reason codes and its own prevention. Find the cause first, then the code.
01 / 06
True payment fraud
A stolen card, used by someone other than the cardholder.
Stolen card details, card testing, a taken-over account. This is the chargeback checkout screening is built for. Once it lands, there is little to answer with: the cardholder really did not make the purchase.
- Visa reason codes
- 10.4 Other Fraud, card-absent
- Mastercard reason codes
- 4837 No Cardholder Authorization, 4863 Cardholder Does Not Recognize
- Preventable?
- Mostly at checkout: 3-D Secure, address and security-code checks, a checkout fraud app.
- What RefundSentry does
- Not at checkout. Once you block a card, a browser or a connection, an order that comes back on it is held before it ships, whatever the account.
02 / 06
Friendly fraud / first-party misuse
The cardholder disputes a purchase they made.
The buyer received the order, then tells the bank they did not make the purchase, or that it never came. Filed as fraud, it looks like true fraud to the network. That is why Visa's Compelling Evidence 3.0 exists: two earlier undisputed orders from the same card, sharing the IP address or device and one more detail, show it was the cardholder.
- Visa reason codes
- Whatever reason the buyer gives, such as 10.4 fraud or 13.1 not received
- Mastercard reason codes
- Such as 4837 No Cardholder Authorization or 4853 Cardholder Dispute
- Preventable?
- Partly: a billing descriptor the buyer recognizes, a reply before they call the bank, and the alerts that let you refund first.
- What RefundSentry does
- Links the buyer's accounts and prepares the evidence pack for the Shopify dispute: the proof of delivery when they say it never came, and the linked accounts in counts and dates.
03 / 06
Item not received (INR)
The buyer says the parcel never arrived.
Your answer is the carrier's proof: the delivery scan, a photo, a signature. Riskified found item-not-received claims 25% more likely to be fraudulent than missing-item reports.
- Visa reason codes
- 13.1 Merchandise/Services Not Received
- Mastercard reason codes
- 4853 Cardholder Dispute (not received is part of it)
- Preventable?
- Yes: tracking on every order, and a signature on the expensive ones.
- What RefundSentry does
- For a Shopify Payments dispute on a tracked order, the carrier's proof of delivery, ready in the pack before the deadline.
04 / 06
Not as described, quality, or damaged
The order arrived, and the buyer says it is wrong, faulty or damaged.
Prevention happens on the product page, months before the dispute: true photos with a size reference, exact dimensions and materials, a return policy that is easy to find, and a reply before the complaint reaches the bank.
- Visa reason codes
- 13.3 Not as Described or Defective, 13.5 Misrepresentation
- Mastercard reason codes
- 4853 Cardholder Dispute
- Preventable?
- Yes, mostly on the product page and in customer service.
- What RefundSentry does
- The linked accounts, when the same person is behind other refunds.
05 / 06
Merchant processing errors
A duplicate charge, a refund that never went out, a cancelled order still charged.
Usually the store's own mistake, so prevention is process: refunds that go out when promised, and charges that match the order.
- Visa reason codes
- 12.6.1 Duplicate Processing, 13.6 Credit Not Processed, 13.7 Cancelled Merchandise/Services
- Mastercard reason codes
- 4853 Cardholder Dispute (credit not processed)
- Preventable?
- Almost always, with process.
- What RefundSentry does
- When the order was already refunded, a refund proof for the pack, so the bank sees the money went back.
06 / 06
Cancelled or unrecognized recurring
A subscription charge the customer disputes, often after a renewal they forgot.
Prevention is a reminder before each renewal, a cancel button the customer can find without writing to you, and a billing descriptor they recognize on their statement.
- Visa reason codes
- 13.2 Cancelled Recurring Transaction
- Mastercard reason codes
- 4841 Cancelled Recurring Transaction, being folded into 4853
- Preventable?
- Yes, with renewal reminders and easy cancelling.
- What RefundSentry does
- Nothing specific to subscriptions: it reads the dispute like any other.
The four layers
The four layers of chargeback prevention
No single tool catches every chargeback. Each layer owns a different moment, from checkout to the dispute.
01 / 04
Layer 1: Pre-checkout
- Catches
- Stolen cards, card testing, account takeover.
- Tools
- 3-D Secure (Visa Secure, Mastercard Identity Check), address and security-code checks, Shopify's fraud analysis and the Fraud Control app, and checkout fraud apps such as Signifyd, NoFraud, Riskified or ClearSale.
02 / 04
Layer 2: Pre-ship
- Catches
- The order that should not ship: from a customer you blocked, under any of their accounts, or picked by a rule you switched on. And the paid orders that wait too long to ship.
- Tools
- RefundSentry, which holds only on your blocks and rules and lists the orders waiting to ship. Shopify Flow, which can hold fulfillment on the Order risk analyzed trigger.
03 / 04
Layer 3: Pre-dispute alerts
- Catches
- A complaint the buyer's bank has received but not yet turned into a chargeback. You refund, and it never becomes one; a non-fraud dispute resolved this way leaves Visa's VAMP count.
- Tools
- Verifi Order Insight, Rapid Dispute Resolution (RDR) and CDRN; Ethoca alerts, owned by Mastercard.
04 / 04
Layer 4: Representment
- Catches
- Chargebacks that landed anyway. A win brings back the money on the order; the dispute still counts at Visa.
- Tools
- Evidence on the Shopify dispute: RefundSentry prepares the pack and saves it there when you send it, or on its own once you switch that on. Recovery apps such as Chargeflow or Justt answer disputes for you.
The most common mistake is going from checkout screening straight to fighting chargebacks, and skipping the alerts in between. An alert keeps a non-fraud dispute out of Visa's count; winning a chargeback does not. If your ratio is climbing, add the alerts first. RefundSentry beside the recovery apps, question by question
Before they are filed
Three chargebacks you can see coming
Some chargebacks leave a trail before the bank calls. RefundSentry shows three.
Refunded, then disputed
An order you already refunded, disputed anyway. RefundSentry marks every order that was both refunded and disputed, whichever came first, and puts a refund proof in the evidence pack, so the bank sees the money went back. Without it, you can pay twice.
A chargeback, then the next order
After a chargeback, you can block the customer, with the card, browser or connection they used. Their next order is then held before it ships, even under a new account, and so is an order to an address you blocked. You release it or cancel it.
RefundSentryHeld by RefundSentry
Check this order before you ship it.
- Paid with the card ending 4417, used on 5 accounts you blocked
- Placed from the browser 6 of those accounts used
- [email protected] is [email protected] with a +tag
Why it is held: card of a blocked customer, browser of a blocked customer. You release it or cancel it.
Orders waiting to ship
At some stores, the paid orders that wait weeks to ship are where most disputes come from. RefundSentry lists the paid orders that have not shipped past your store's late day, and shows your own history next to them: how many never-shipped orders were disputed, against the ones shipped on time.
It never cancels or refunds them. You ship, give the customer a date, or cancel and refund, in Shopify.
Compelling Evidence 3.0
Visa Compelling Evidence 3.0: what it actually requires
Compelling Evidence 3.0, in force since April 15, 2023, lets you answer a card-absent fraud dispute by showing the cardholder bought from you before without disputing. A qualifying case also leaves Visa's ratio: the dispute and the fraud report both.
- Two earlier undisputed transactions on the same card, at your store.
- Each made more than 120 days and fewer than 365 days before the dispute.
- At least two matching data elements across the three transactions: IP address, device ID or fingerprint, user account login, shipping address.
- At least one of the two is the IP address or the device ID.
- Reason code
- Only Visa reason code 10.4, Other Fraud in a card-absent environment.
- Automatic qualification
- Since October 17, 2025, Visa qualifies transactions authenticated with Visa Secure or Visa Data Only automatically.
RefundSentry's linked-accounts evidence is not a Compelling Evidence 3.0 submission: it tells the bank, in counts and dates, which other accounts share the buyer's card, browser, address or device. Building the evidence for a chargeback
Shopify
Shopify's native chargeback handling
More capable than most merchants think, with gaps an app fills.
What Shopify does well
- Pre-fills and sends basic order information for you: the products, the shipping company and tracking, the fulfillment date, the addresses, the order date, and the customer's IP address and country.
- Sends the response saved on the dispute at the due date, if you have not submitted it earlier.
- Returns the chargeback amount and the $15 fee (US) when you win.
- Reimburses fraudulent and unrecognized chargebacks on eligible US Shop Pay orders, free, through Shopify Protect.
Where an app fills in
- Shopify's pre-filled answer is the order's own details. It does not link the buyer to their other accounts.
- A refund already made is not in that list: adding it to your answer is up to you.
- RefundSentry prepares both for Shopify Payments disputes and saves the pack on the dispute: when you press Send to Shopify, or on its own when a dispute lands on a reason you usually win, once you switch that on.
For Shopify's own fraud tools, see the companion guide: Shopify fraud protection: what is built in, what is missing. For what happens before a chargeback, when refunds repeat: the return fraud playbook.
What to do
Decision framework: which layer to add when
Pick your next step by where your disputes stand today.
01
If you have few disputes
Keep Shopify's checkout tools on, ship with tracking, and answer every dispute with the evidence you have. Put the evidence on the dispute before the deadline: Shopify sends what is saved there.
02
If your dispute rate is climbing
Add pre-dispute alerts, so non-fraud disputes are refunded before they count. Then look at where your disputes come from: orders refunded before, orders that waited to ship, or buyers behind several accounts. Each has its own fix.
03
If Shopify has put a reserve on your payouts, or you are near a network threshold
Refund early on every alert, block the customers behind repeat chargebacks so their next orders are held, clear the orders waiting to ship, and write down your plan for Shopify and your payment provider.
Questions
Chargeback prevention, answered
What is the VAMP threshold in 2026?
Since April 1, 2026, Visa's Acquirer Monitoring Program counts a merchant as excessive at a 1.5% ratio, down from 2.2%, in the US, Canada, Europe, Asia Pacific and Latin America; Central Europe, the Middle East and Africa stay at 2.2%. The ratio is fraud reports (TC40) plus disputes (TC15) over settled card-not-present transactions, and a merchant is only counted from 1,500 a month. Enrolled merchants pay $8 per fraudulent or disputed transaction.
What's the difference between chargeback prevention and chargeback recovery?
Prevention stops the dispute before it is filed, or refunds it through an alert before it becomes a chargeback. Recovery answers the chargeback after it lands, with evidence. Prevention protects your ratio. Recovery can win back the money on one order, and Visa still counts the dispute.
What is Visa CE 3.0?
Visa Compelling Evidence 3.0, in force since April 15, 2023, lets a merchant answer a card-absent fraud dispute (reason 10.4) with two earlier undisputed transactions on the same card, made 120 to 365 days before, that share at least two data elements with the disputed one: IP address, device ID, account login or shipping address, one of them the IP address or device ID. A qualifying case removes both the dispute and the fraud report from the VAMP ratio. Since October 17, 2025, transactions authenticated with Visa Secure or Visa Data Only qualify automatically.
Does Shopify Protect prevent chargebacks?
No. It reimburses them: the chargeback amount and its fee, on eligible Shop Pay orders, for fraudulent and unrecognized chargebacks only. It is free, for US stores with a US Shopify Payments account, on orders of physical items fulfilled with valid tracking within 7 days and in transit within 10. Changing the shipping address after checkout voids it, and other dispute reasons, such as item not received, are not covered.
Does winning a chargeback remove it from my chargeback rate?
At Visa, no: the VAMP ratio counts disputes whether you win or lose, unless the case qualifies under Compelling Evidence 3.0, or a non-fraud dispute was resolved through a pre-dispute alert before it became a chargeback. Winning still returns the chargeback amount and the $15 fee on Shopify Payments in the US.
What is a pre-dispute alert?
A notice that a cardholder has complained to their bank, sent before the complaint becomes a chargeback, so you can refund first. Verifi's CDRN gives you 72 hours to refund. Verifi's Rapid Dispute Resolution refunds automatically under rules you set. Ethoca alerts, owned by Mastercard, warn you of a Mastercard dispute. Verifi Order Insight shares the order's details with the bank, so the cardholder recognizes the purchase.
What happens if my Shopify chargeback rate exceeds 1%?
Shopify does not publish a threshold. It says your store is held to a higher standard than the card networks' thresholds, and it can put a reserve on your payouts after an assessment finds more risk. The card networks do publish theirs: Visa's VAMP at 1.5% and 1,500 a month, Mastercard's ECM from 1.5% and 100 chargebacks a month.
How much does a single chargeback actually cost?
At least the order amount and Shopify's $15 fee in the US, plus the goods when they are gone and the time spent answering. If you win, the amount and the fee come back. LexisNexis's 2025 True Cost of Fraud study puts the full cost to US merchants at $4.61 for every $1 of fraud.
Primary sources cited on this page
- Stripe: card network dispute monitoring programs (Visa VAMP, Mastercard ECM)
- Merchant Risk Council: stricter VAMP ratio thresholds are now in effect
- Visa: the VAMP program update
- Chargebacks911: Visa Compelling Evidence 3.0
- Checkout.com: Visa Compelling Evidence 3.0
- Chargeflow: Visa chargeback reason codes
- Chargeflow: Mastercard chargeback reason codes
- Verifi: prevent disputes (Order Insight)
- Verifi: resolve disputes (RDR, CDRN)
- Shopify Help: resolving a chargeback
- Shopify Help: the chargeback process and fees
- Shopify Help: reserves on Shopify Payments
- Shopify Help: Shopify Protect
- LexisNexis Risk Solutions, True Cost of Fraud study 2025
- Riskified, refund abuse analysis, January 2026
Last reviewed 27 September 2026. Visa, Mastercard and Shopify change their rules and pages often; check the linked source before you decide. Visa and Mastercard publish few of these rules openly, so some figures come from payment providers' and chargeback specialists' summaries, named above. Disclosure: RefundSentry sells software for Shopify stores and sits at the second and fourth layers of this page's model.
Start
See who is behind your refunds.
Install, approve a plan to start the 14-day free trial, and RefundSentry reads your history first. Then you choose what, if anything, runs on its own.