Card Network Chargeback Rules for Merchants: Deadlines and Arbitration

Card network chargeback rules are the private rulebooks Visa and Mastercard use to govern how payment disputes move between cardholders, issuing banks, merchants, and acquiring banks. Federal law sets a consumer-protection floor, but the operational mechanics — filing windows, dispute categories, evidence standards, and the escalation path to arbitration — live inside each network’s own rules. Which set applies depends on the card in your wallet, and the details decide who ends up with the money.

Deadlines That Control Whether You Can Dispute at All

Two clocks run at the same time on every dispute, and the shorter one wins.

Under the Fair Credit Billing Act, a cardholder has 60 days from the date the issuer mails or transmits the statement containing the error to send written notice of a billing dispute. The notice must identify the account, describe the error, and explain why the charge is wrong. The issuer then has 30 days to acknowledge and up to two billing cycles (no more than 90 days) to resolve it.¹

Network windows are generally longer. Visa and Mastercard both allow up to 120 days from the transaction date for most reason codes. For certain consumer disputes involving undelivered goods or services, Visa runs the 120 days from the expected delivery date, capped at 540 days from the original transaction.² The practical rule is simple: file quickly. Waiting until the final week of any window is a bad bet.

The Four Categories Every Dispute Falls Into

Both networks organize disputes into four buckets, and the bucket determines the evidence you need and the deadline you’re working against. Misclassifying is one of the most common ways a claim stalls.

Fraud. The card was used without permission. Identity theft, lost or stolen cards, and card-not-present fraud all sit here. This is the largest volume of chargebacks, and the evidence standards have grown technical.
Authorization. The merchant processed the transaction without proper approval — running a charge after a decline response, or bypassing chip-reading requirements. These are usually merchant-side technical failures.
Processing errors. Administrative mistakes at settlement: duplicate charges, wrong amounts, late-submitted transactions. A restaurant charge that hits your statement twice lands here.
Consumer disputes. Goods or services weren’t delivered, arrived defective, or didn’t match the description. Cancelled subscriptions that keep billing also belong here. This category demands the most documentation from the cardholder.

Visa labels these Categories 10 through 13 in its Core Rules, with each containing multiple specific reason codes.² Mastercard uses a parallel structure with its own numbering. The issuing bank handles classification, but describing the problem accurately when you call reduces the chance of a misrouted claim.

Evidence That Actually Wins

The issuing bank needs enough documentation to justify pulling money from the merchant’s account, and the merchant gets a chance to fight back. Weak evidence invites a successful rebuttal.

Start with the basics from the billing statement: transaction date, exact dollar amount, and the merchant name as it appears on the charge. Every transaction also carries a reference number the bank can use to trace it through the clearing system. Beyond that, the evidence depends on the dispute type.

For consumer disputes over undelivered or defective goods, keep order confirmations, shipping tracking numbers, photos of damaged items, and screenshots of the product description you relied on. If you attempted a return, save the return tracking number and any return authorization the merchant issued. Records showing you tried to resolve the problem directly with the merchant first, such as emails, chat transcripts, and call logs, matter. Most issuers want to see a good-faith attempt before escalating.

Digital Goods and Card-Not-Present Fraud

Disputes over digital products and online fraud carry their own challenge because there’s no physical item to photograph. Visa’s Compelling Evidence 3.0 framework lets merchants defend fraud claims by proving a pattern of legitimate use. To defeat a fraud dispute under CE3.0, a merchant must produce at least two prior undisputed transactions from the same account where at least two key data points — such as the IP address, device fingerprint, user login, or shipping address — match the disputed transaction.³ One of those matching elements must be either the IP address or device fingerprint. A long history of your own purchases with the same merchant strengthens the merchant’s defense against a fraud claim. If the fraud is real, the mismatch on IP and device generally works in the cardholder’s favor.

How the Dispute Moves Through the System

Once you file with your issuing bank, the claim enters a structured back-and-forth between financial institutions.

The issuer reviews the claim and, if it qualifies, transmits the dispute through the card network’s platform. Visa uses Visa Resolve Online, an end-to-end dispute processing tool available to issuers and acquirers.⁴ Mastercard routes disputes through Mastercom.⁵ The dispute lands with the merchant’s acquiring bank, which notifies the business.

The issuer typically posts a provisional credit to the cardholder’s account at this stage. That temporary refund stays in place while the merchant decides how to respond. Response windows differ by network. Visa gives merchants 30 days to submit a dispute response.⁶ Mastercard allows 45 calendar days for most transactions.⁷

If the merchant responds with evidence defending the original charge, a process called representment, the issuer reviews that rebuttal and decides whether to accept it or push the case further. If the merchant misses the deadline or submits insufficient evidence, the provisional credit becomes permanent. Many disputes end here, which is why merchants without organized transaction records tend to lose by default.

Pre-Arbitration

When representment doesn’t resolve the disagreement, the case moves to a second round of review. On the Visa side, either party can initiate pre-arbitration after representment, with a 30-day response window.⁶ Mastercard uses a parallel mechanism called pre-compliance, which can be filed at any point in the dispute lifecycle and follows its own submission process through Mastercom.⁸ If the receiving party fails to respond to a Mastercard pre-compliance case, the system automatically rejects it. The stage gives both sides one more chance to settle before formal arbitration costs kick in.

Arbitration

If pre-arbitration fails, the network itself becomes the decision-maker. Mastercard determines financial responsibility, and that determination closes the case.⁵ Visa follows a parallel structure through its own dispute resolution rules.² The network reviews all submitted evidence and issues a binding ruling. Neither the issuer nor the acquirer can appeal further within the network system.

Arbitration fees are steep, and the losing party pays them. Both networks charge hundreds of dollars per case, which is why the overwhelming majority of disputes settle earlier. Cases that reach arbitration tend to involve either strong evidence on both sides or transaction amounts large enough to justify the risk.

Liability Caps: Credit vs. Debit

The protections behind a chargeback depend heavily on the card type, and the difference catches people off guard after fraud.

Federal law caps liability for unauthorized credit card charges at $50, regardless of how much the thief spends.⁹¹⁰¹¹ Those policies do not cover certain commercial cards and unregistered prepaid cards like gift cards.

Debit cards pull directly from the bank account, and Regulation E ties liability to how fast the cardholder reports. Notify the bank within two business days of learning the card was lost or stolen, and the maximum liability is $50. Report after two business days but within 60 days of the statement, and that cap rises to $500. Miss the 60-day window, and the cardholder can be liable for every unauthorized charge occurring after that deadline.¹² Visa and Mastercard’s zero-liability policies extend to debit in most cases, but the gap between statute and voluntary policy means the protection depends on the issuer honoring the promise.

What Excessive Chargebacks Mean for Merchants

Networks don’t just resolve individual disputes. They monitor merchants whose chargeback volume points to a systemic problem, and the consequences escalate fast.

Visa’s Acquirer Monitoring Program flags merchants who exceed a 1.5% dispute-to-transaction ratio at the excessive level, with a minimum threshold of 1,500 disputes. Merchants in that tier face per-chargeback fees and review fees that can reach $25,000. Failure to bring the ratio down can lead to account termination.

Mastercard runs an Excessive Chargeback Merchant program with two tiers. The first triggers at 100 chargebacks per month and a ratio of 1.5% or higher. The second kicks in at 300 monthly chargebacks and a 3.0% ratio.⁷ Merchants who can’t exit face placement on Mastercard’s MATCH list (Member Alert to Control High-risk Merchants). Once listed, a business stays flagged for five years, and during that period finding a payment processor becomes very difficult. Processors that will take the account charge higher fees and hold larger reserves.

These programs create a financial incentive for merchants to resolve complaints before they become chargebacks. That’s part of why some merchants become noticeably more cooperative once a cardholder mentions disputing a charge.

Filing a False Dispute Can Backfire

“Friendly fraud” — filing a chargeback for a legitimate purchase you actually received — is treated as fraud. Merchants who defend against a false chargeback through representment keep the money, and the cardholder’s bank may flag the account for abuse. Repeat offenders risk having their card accounts closed. In serious cases, merchants can pursue civil claims for the disputed amount plus costs, and deliberate chargeback fraud can carry criminal penalties including fines and imprisonment. If the goods arrived as described and the buyer simply regrets the purchase, the right move is contacting the merchant for a refund rather than routing the problem through the dispute system.

1
Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors
2
Visa. Visa Core Rules and Visa Product and Service Rules
3
Visa. Compelling Evidence 3.0 Merchant Readiness
4
Visa. Visa Resolve Online
5
Mastercard Developers. Mastercom – Dispute Resolution Cycle
6
Visa. Visa Claims Resolution – Efficient Dispute Processing for Merchants
7
Mastercard. Chargeback Guide Merchant Edition
8
Mastercard Developers. Pre-Arbitration and Pre-Compliance Case Filing
9
Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card
10
Visa. Zero Liability
11
Mastercard. Zero Liability Protection for Unauthorized Transactions
12
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers