Exact Visa/MC thresholds, MATCH list criteria, reason code win rates and a prevention playbook — everything iGaming operators need to protect their payment accounts.
Chargebacks are the single biggest reason iGaming operators lose payment processing accounts. Not fraud, not AML failures, not licensing complications — chargebacks. A chargeback ratio of just 1.0% triggers Visa's Excessive Chargeback Programme; in practice, most specialist acquirers begin informal review at 0.5% and take formal action at 0.65%. The average iGaming operator runs a chargeback rate 3–5× higher than general e-commerce. That gap is not accidental — it is structural, driven by the nature of digital gambling transactions, and it requires specific operational responses.
This guide covers the exact Visa and Mastercard programme thresholds, the MATCH list and how to avoid it, the most common reason codes and what win rates look like in representment, and an eight-step operational playbook that operators have used to reduce chargeback ratios from above 1.5% to below 0.4% within two billing cycles.
The iGaming chargeback problem is not primarily a fraud problem — it is a perception problem compounded by operational failures. Here are the five structural causes.
Descriptor confusion. When a player deposits on a white-label platform or a site operating under a different holding company name, the descriptor on their bank statement often reads something like "PAYMENTCO\*GLOBALDIG" rather than the casino brand they recognise. Issuing banks receive dispute calls from cardholders who have no idea what a charge is. The cardholder disputes it; the bank sides with them; you have a chargeback that was entirely preventable.
Friendly fraud. A player deposits £300, loses it, and subsequently disputes the transaction with their bank claiming they did not authorise the charge. The issuing bank, unable to disprove the claim without contacting the merchant, frequently raises a chargeback. Friendly fraud accounts for 40–55% of iGaming chargebacks by volume. It is not random — it clusters around losing sessions, large single deposits, and players who have exhausted their accounts.
Bonus abuse and post-wagering disputes. A more deliberate form of friendly fraud: a player claims a welcome bonus, meets the wagering requirement using the bonus balance, then disputes the original deposit. The operator has already paid out winnings; the deposit chargeback represents a double loss. This pattern is identifiable in advance — players who request chargebacks after clearing wagering requirements show consistent behavioural signatures.
Failed or delayed withdrawals. When a player requests a withdrawal and it is delayed — by AML review, verification requirements, or payment processing queues — the path of least resistance is to chargeback the original deposit rather than wait. Each day beyond 72 hours that a pending withdrawal sits in queue increases chargeback probability by a measurable amount. Operators with automated withdrawal status communications have demonstrably lower chargeback rates on the "services not rendered" code.
3D Secure failures and liability shift issues. For card-not-present transactions authenticated via 3DS2, liability for fraudulent chargebacks shifts to the issuing bank, not the merchant. But failed or abandoned 3DS authentications leave liability with the operator. A 3DS abandonment rate above 8–12% — common on mobile where 3DS UX is poor — creates a disproportionate share of unprotected transactions. These then become chargeback exposure.
Currency confusion on international cards. A player in Poland depositing on a platform that charges in euros, processed by a Maltese acquiring bank, seeing a charge on their PLN statement with a different exchange rate than expected, is far more likely to dispute a charge than a player making a domestic transaction. The mismatch between displayed price and charged amount is one of the most consistent triggers for billing dispute chargebacks.
The single fact that iGaming operators most commonly get wrong is believing that the 1% threshold is where problems begin. It is not — it is where problems become existential. Here is the complete programme structure.
| Card Scheme | Programme | CB Ratio Trigger | Monthly CB Volume Trigger | Monthly Fine | Escalation |
|---|---|---|---|---|---|
| Visa | Standard Monitoring Programme (SMP) | 0.65% | 75 CBs | Review / warning | Move to ECP if unresolved in 90 days |
| Visa | Excessive Chargeback Programme (ECP) | 1.0% | 100 CBs | $50–$100 per CB | Escalate to HECM |
| Visa | High Excessive Chargeback Merchant (HECM) | 2.0% | 1,000 CBs | $100 per CB + $25,000/month surcharge | Acquirer must exit within 3 months |
| Mastercard | Excessive Chargeback Programme (ECP) | 1.5% | 100 CBs | $1,000–$5,000/month + $5 per CB over limit | Move to HEMP |
| Mastercard | High Excessive Chargeback Programme (HEMP) | 3.0% | 300 CBs | $25,000/month + $10 per CB over limit | Acquirer must exit |
How chargeback ratio is calculated: chargebacks received in month N divided by transactions processed in month N-1. This lag is critical — a spike in chargebacks this month reflects transaction volume from last month, not this one. Operators who scale up processing volume rapidly can temporarily suppress their ratio; operators who scale down volume while disputes are still arriving can see their ratio spike without processing any additional bad transactions.
Re-disputes count separately. A single transaction that is charged back, representated, and charged back again generates two chargeback events, each counted individually against your ratio. Operators who fight every chargeback through representment without a realistic win-rate assessment can inadvertently inflate their count.
Practical safe zone: maintain a chargeback ratio below 0.60% for Visa and below 1.0% for Mastercard to stay off all formal monitoring programmes. Most iGaming-specialist acquirers begin informal review at 0.5% and will schedule a remediation call at that point. An operator who reaches 0.65% without a documented remediation plan in place is likely 30–60 days from a formal notice.
Both triggers must be met simultaneously. To enter a programme, you need to breach both the ratio threshold AND the volume threshold. A very small operator with 50 transactions a month will not enter Visa's SMP even at a 2% ratio — the 75 monthly chargeback volume floor is not met. Conversely, a high-volume operator with 10,000 transactions can breach the volume floor at a ratio well below the stated threshold. Know which constraint you are closest to.
MATCH (Member Alert to Control High-Risk Merchants) is Mastercard's shared blacklist for merchants terminated for cause. Visa maintains a parallel mechanism via its VIOR (Visa Integrity Officer Report) process. Both systems share data across acquiring banks globally — there is no geographic workaround.
What gets you listed. Any one of the following five criteria triggers a MATCH placement:
The chargeback criterion is the most common route for iGaming operators. Note the two-part requirement: ratio breach plus acquirer termination. An acquirer who keeps you on through a chargeback remediation programme — even at 1.5% — does not trigger MATCH. The listing is a consequence of the termination, not the ratio breach alone.
Duration. Five years from date of placement. There is no appeal process to the card networks. During this period, no Visa or Mastercard acquiring bank in the world will board you as a new merchant. The listing is not jurisdiction-specific — a MATCH placement from a Maltese acquirer is visible to a UK acquirer, a Cayman acquirer, and a Georgian acquirer alike.
What remains available while MATCH-listed. Alternative payment rails are not blocked by MATCH: bank transfer processing (SEPA, Faster Payments, SWIFT), crypto payment gateways, certain EMI accounts operating on non-card rails, and open banking payment initiation. Card acceptance is blocked entirely.
How to check your status. Only licensed acquirers have direct access to the MATCH database lookup. If you want to know whether your business or any principals are listed, you must ask an acquirer to run the check on your behalf. There is no self-service lookup.
Early removal. Technically possible but extremely rare. The original acquiring bank — the one that placed you on the list — must submit a removal request to Mastercard with documented evidence that the listing was made in error. Banks have no commercial incentive to do this and rarely comply. Do not plan your business continuity around early MATCH removal.
Avoiding MATCH entirely. The only reliable strategy is to avoid the two-part trigger: either keep your chargeback ratio below the threshold, or — if you are approaching the threshold — initiate voluntary account transition before your acquirer terminates you. A voluntary mutual termination initiated by the operator before a formal chargeback-related termination may avoid MATCH placement. Discuss this explicitly with your acquirer if you are in a remediation programme and it is not working.
Understanding the reason code distribution tells you where to direct prevention resources. The codes below use the Visa 10.x/13.x framework alongside the Mastercard equivalents.
| Reason Code | Description | Frequency in iGaming | Win Rate (representment) | Primary Cause |
|---|---|---|---|---|
| Visa 10.4 / MC 4853 | Card-not-present fraud | 40–55% | 25–40% | Friendly fraud / stolen cards |
| Visa 13.1 / MC 4853 | Service not rendered / merchandise not received | 15–25% | 50–70% | Failed withdrawal / account suspension |
| Visa 13.6 / MC 4853 | Credit not processed | 10–20% | 60–75% | Refund delay or failed reversal |
| Visa 10.5 / MC 4837 | Visa Fraud Monitoring Programme | 5–10% | 10–20% | Flagged by card scheme fraud systems |
| Visa 12.1 | Late presentment | 3–8% | 80–90% | Processing delay beyond presentment window |
What the win rates mean for your operation. An operator with good evidence — login records, IP logs, device fingerprints, gameplay history, timestamped terms acceptance — can win 30–60% of friendly fraud (10.4/4853) disputes through representment. Without systematic evidence capture, that win rate drops below 15%. On "services not rendered" (13.1), the win rate is higher because the evidentiary standard is easier to meet: show the player accessed the account, used the service, and received the value they paid for.
The 10.5 code warrants special attention. Visa's Fraud Monitoring Programme flags transactions its systems identify as high-risk. Win rates here are low because the dispute originated with Visa's own fraud detection, not a cardholder claim — there is no evidence packet that rebuts a scheme-level fraud flag. Prevention is the only effective strategy for these: 3DS2 authentication, velocity controls, and device fingerprinting.
Late presentment (12.1) is entirely operator-controlled. Visa requires transactions to be presented within 7 calendar days of authorisation; Mastercard allows up to 30 days but recommends daily presentment. Processing delays at your PSP level can create these chargebacks unnecessarily. Confirm your PSP's presentment schedule and ensure same-day or next-day batch processing.
These eight measures are listed in order of impact. An operator implementing all eight — properly — can realistically achieve a sustained chargeback ratio below 0.4%.
1. Descriptor matching. Your statement descriptor must match the brand name the player signed up with. Not your PSP's trading name, not your holding company, not a payment processor sub-entity. Visa's Consumer Clarity programme (also called Visa Merchant Purchase Inquiry) allows soft descriptors — use it. The soft descriptor should include your brand name and a customer service contact number. This single measure typically reduces billing dispute chargebacks (13.1, 13.6) by 20–30% within 90 days.
2. 3D Secure 2 (3DS2) mandate. 3DS2 shifts liability for authenticated transactions to the issuing bank. For EEA cardholders, 3DS2 is mandatory under PSD2's Strong Customer Authentication requirements. For non-EEA cardholders — the majority of many iGaming operators' player bases — 3DS2 is optional but highly recommended. Properly implemented, 3DS2 reduces friendly fraud chargebacks (10.4) by 40–60%. The key qualifier is "properly implemented" — a 3DS implementation with an abandonment rate above 10% creates as many problems as it solves. Invest in a 3DS provider with proven conversion rates in your target markets.
3. Withdrawal communication. The majority of "services not rendered" chargebacks occur when withdrawals take more than 3 business days without any communication. Implement automated email and SMS notifications at each withdrawal stage: requested, under review, processing, dispatched, completed. Operators who have implemented this have reported 70% reductions in 13.1 chargebacks on withdrawal-related disputes. This is one of the highest-ROI interventions available.
4. Bonus abuse detection. Cross-reference accounts that request chargebacks after clearing wagering requirements against device fingerprints, email addresses, IP addresses, and payment methods. Build automated holds on withdrawals for a 72-hour dispute window after any bonus-funded win. Flag accounts that show the pattern of deposit, bonus claim, wagering completion, chargeback request — these are not random. A chargeback on a bonus-completed account is almost always intentional.
5. Velocity controls. Cap single-session deposits at a player-defined or operator-defined limit. Require step-up authentication (not just 3DS, but a full re-login or second-factor prompt) for transactions above £500 or equivalent. High-velocity depositing in a short window preceding a chargeback is a consistent pattern — identifiable in real time with a basic velocity rule engine. Most fraud tools built into PSPs can implement this with configuration changes rather than development work.
6. Rapid refund policy. For genuine player disputes — unauthorised access, billing errors, duplicate charges — issue a refund within 24 hours of the dispute being raised. A refund costs you the transaction amount plus any PSP fee. A chargeback costs you the transaction amount, a £15–£65 chargeback fee, and a count against your ratio. For disputes that are clearly legitimate, the refund is always cheaper. Assign a dedicated player finance team member to monitor incoming disputes and act within SLA.
7. Chargeback alert services. Ethoca (operated by Mastercard) and Verifi (operated by Visa) provide real-time notifications of incoming chargeback disputes — typically with a 24–72 hour window before the chargeback is formally filed. During that window, you can issue a refund and prevent the chargeback from being recorded against your ratio. Subscription cost: £0.30–£0.80 per alert. Each prevented chargeback saves the fee (£15–£65) and, more importantly, protects your ratio. At any volume above 50 chargebacks per month, the alert services are cost-positive. At 200+ per month, they are essential.
8. KYC-to-card binding at registration. Requiring that the card used for deposits matches the name and identity on file — confirmed via KYC document verification — blocks the majority of stolen-card friendly fraud at the point of onboarding. An operator who processes cards for verified identities that match the cardholder name has a substantially lower Visa 10.4 dispute rate than one who does not. This is a compliance measure (RG-aligned responsible gambling and AML requirements often mandate it anyway) that has a direct commercial benefit on chargeback rates.
Representment is the formal process of challenging a chargeback. You are submitting evidence to the card network and requesting reversal. Time limits are strict: you typically have between 10 and 45 days from chargeback notification to respond, depending on the scheme and reason code. Missing the window means an automatic loss.
The evidence package for a winning representment in iGaming should include:
Win rates with and without proper documentation. Operators with systematic evidence capture using a proper chargeback management tool win 30–60% of 10.4 (friendly fraud) representments. Without it, the win rate is below 15%. For 13.1 (service not rendered), evidence of platform access and activity wins 50–70% of disputes regardless of documentation sophistication.
Managed services. For operators without in-house expertise, Chargebacks911, Kount, Riskified, and Verifi all offer representment management services. Typical fee structures range from 20–30% of recovered funds to £50–£120 per case at volume. For operators processing above £500,000 per month, the economics generally favour building an in-house representment function combined with Ethoca and Verifi alert subscriptions, rather than outsourcing at a percentage of recovery.
The re-dispute trap. If you win a representment and the issuer files again (a "pre-arbitration" or "arbitration chargeback"), you are in a second round that is more expensive and harder to win. Card networks charge arbitration fees (Visa's fee is currently $500; Mastercard's is $250) that are payable regardless of outcome if you lose. Only pursue second-round arbitration on high-value transactions where your evidence is strong and the transaction amount justifies the fee risk.
Rolling reserves are set based on anticipated chargeback exposure. The acquirer's calculation is essentially: reserve percentage × monthly processing volume = reserve balance, with a target balance of 2–3× the average monthly chargeback liability.
A clean chargeback ratio has a direct and quantifiable impact on your reserve terms. Most acquirers operate a tiered reserve structure tied to chargeback performance:
If your chargeback ratio deteriorates, your acquirer will typically respond in two ways simultaneously: increasing the reserve percentage and extending the rolling period. An operator who moves from 0.5% to 1.2% over three months can see their effective cash tied up in reserves double or triple — not because they processed more, but because the reserve terms changed.
Conversely, operators who reduce their chargeback ratio through effective prevention can negotiate reserve improvements at their next quarterly review. Reserve renegotiation is one of the most financially significant outcomes of a successful chargeback programme.
For the full rolling reserve data table including acquirer-specific benchmarks, see iGaming Banking Requirements.
If your acquirer terminates your account due to chargebacks, the sequence of steps matters enormously for your ability to process payments again.
1. Get written confirmation of the termination reason. Do not accept a verbal notice or a vague letter. Request written documentation stating the exact grounds for termination. This matters for your MATCH determination.
2. Confirm your MATCH status explicitly. Ask your acquirer directly, in writing: "Has our business been, or will it be, placed on the MATCH list?" They are required to notify you if a MATCH placement occurs. Get this confirmation before doing anything else.
3. Transition to alternative rails immediately. Bank transfers (Faster Payments, SEPA), open banking payment initiation, and crypto payment gateways can maintain player deposits and withdrawals while you seek new card processing. Move existing players to alternative payment methods before the effective termination date.
4. Do not misrepresent your termination history. Every new acquirer application will ask whether you have had a merchant account terminated. Lying about this is grounds for immediate MATCH placement — one of the five qualifying criteria. Answer honestly and provide the written explanation you obtained in step one. Acquirers who specialise in high-risk do underwrite post-termination operators; they will not underwrite operators who lied on their application.
5. Use a specialist broker. Direct applications to acquiring banks after a termination have very low success rates — underwriters screen for termination history early in the review process. A specialist high-risk payments broker has existing relationships with the acquirers who will consider your situation and knows how to present your remediation plan effectively. The broker fee (typically 0.1–0.3% of ongoing processing volume) is substantially lower than the cost of repeated unsuccessful direct applications.
What chargeback ratio will cause my iGaming payment account to be closed?
Most iGaming-specialist acquirers begin informal review at 0.5% and take formal remediation action at 0.65% (Visa's SMP entry threshold). Termination typically follows if the ratio remains above 0.65% for 90 days without improvement, or if you breach 1.0% (Visa ECP threshold) without a credible remediation plan. The card network thresholds are triggers for fines and mandatory acquirer exit; individual acquirer contracts often contain lower contractual limits.
How long do I have to dispute (representment) a chargeback?
The representment window varies by scheme and reason code: Visa disputes must typically be responded to within 30 calendar days of receiving the chargeback notification; Mastercard allows up to 45 days for most codes. However, internal processing and evidence gathering should begin immediately upon notification — waiting until day 28 reduces the quality of the evidence you can compile. Set up automated workflows to trigger evidence gathering the day a chargeback is received.
Can I get a new acquirer if I have been MATCH-listed?
For card processing, no. MATCH listing blocks you from any Visa or Mastercard acquiring relationship globally for five years. Alternative payment rails — bank transfers, open banking, crypto gateways — remain available. Some EMIs that process on non-card rails can still provide payment services. If your principals (directors, beneficial owners) are personally MATCH-listed in addition to the merchant entity, this complicates even non-card applications, as many EMIs conduct their own merchant history checks beyond the MATCH database.
Is 3DS2 mandatory for iGaming operators?
For EEA-issued cards, yes — PSD2's Strong Customer Authentication requirements mandate 3DS2 (or equivalent SCA) for card-not-present transactions. Exemptions exist (low-value transactions below €30, trusted beneficiary exemptions, transaction risk analysis exemptions), but the baseline obligation is 3DS2. For non-EEA cards — UK cards post-Brexit, US cards, Asian cards — 3DS2 is not legally mandated but is strongly commercially advisable: it shifts chargeback liability to the issuing bank for authenticated transactions, which is the single most effective technical measure available for reducing your friendly fraud dispute rate.
What is the difference between a chargeback and a refund?
A refund is initiated by the merchant and is processed through normal payment channels — the funds are returned to the cardholder, the transaction is reversed, and no chargeback is recorded. A chargeback is initiated by the cardholder via their issuing bank, triggers a formal dispute process through the card network, results in a chargeback fee (£15–£65), and counts against your chargeback ratio. For the same transaction, a refund costs you the transaction amount; a chargeback costs you the transaction amount plus the fee plus ratio damage. Whenever a dispute is legitimate, process it as a refund before it becomes a chargeback.
Submit a free pre-approval in 2 minutes. We respond within 24 hours with a realistic outcome.
Get Free Pre-Approval