What’s Changed Since the Original VAMP Announcement
- VAMP ratio now includes all TC15 disputes. Both fraud and non-fraud TC15s are counted. If a customer claims fraud and it generates both a TC40 report and a TC15 chargeback, that single incident counts twice against your ratio. This means most merchants see significantly higher ratios under the new formula compared to the old system.
- Your “Excessive” threshold is currently 2.2% — but it drops to 1.5% on April 1, 2026 in North America, EU, and Asia Pacific. That’s a roughly 32% reduction in how many disputes you’re allowed before penalties kick in.
- You need at least 1,500 disputes/fraud reports per month to be flagged. This was raised from 1,000. If you’re below 1,500, Visa won’t flag you directly—but your processor still might.
- Your processor is under even more pressure. Visa tightened the thresholds for acquirers (your payment processor) in January 2026. That means your processor may impose stricter internal limits on you than what Visa publishes—even if you’re technically below Visa’s merchant threshold.
- Stricter merchant thresholds delayed to April 1, 2026 (originally planned for January 2026). This gives you a few more months to prepare, but the clock is ticking.
For a deeper look at how these changes interact with broader payment compliance requirements, see our ecommerce compliance guide.
VAMP Enforcement Timeline: What’s Already in Effect
- April 1, 2025: VAMP launched, replacing the old separate fraud and dispute monitoring programs. No penalties yet—just monitoring.
- June 1, 2025: New VAMP thresholds took effect. Your “Excessive” threshold was set at 2.2%. Visa started notifying processors about merchants approaching limits.
- October 1, 2025 — PENALTIES NOW ACTIVE: If your VAMP ratio exceeds 2.2% and you have 1,500+ disputes/fraud reports in a month, Visa charges $8 per dispute. First-time identifications get a 3-month grace period; after that, fines hit immediately.
- January 2026: Visa tightened enforcement on processors themselves. This is why many merchants are now seeing stricter internal limits, account reviews, or even account closures from their payment providers—even if they haven’t been flagged by Visa directly.
- April 1, 2026 — COMING SOON: Your “Excessive” threshold drops from 2.2% to 1.5% in North America, EU, and Asia Pacific. If you’re currently between 1.5% and 2.2%, you need to act now or you’ll be in violation.
Your VAMP Thresholds: Where You Stand Today
| What Visa Measures | Current Limit | April 1, 2026 |
|---|---|---|
| VAMP Ratio (fraud + disputes ÷ sales) | ≥ 2.2% = “Excessive” | ≥ 1.5% = “Excessive”* |
| Minimum count to be flagged | 1,500 disputes + fraud reports/mo | Same |
| Penalty if flagged | $8 per CNP dispute | $8 per CNP dispute |
*The April 2026 reduction to 1.5% applies to North America, EU, and Asia Pacific. Other regions may stay at 2.2%.
Why your processor’s threshold matters more than Visa’s: Visa also holds your payment processor (acquirer) to separate, much stricter thresholds—as low as 0.5%. To keep their own numbers safe, many processors are setting internal limits on merchants that are tighter than what Visa publishes. So even if you’re below Visa’s 2.2% threshold, your processor might flag you at 1.0% or 1.5%. If you’re getting warnings from your processor, this is likely why.
1. Understand Your VAMP Risk
Before you can protect your business, you need to know where you stand.
- Ask your processor how VAMP applies to you. Find out which VAMP thresholds your merchant account is being measured against, and how close you are to triggering them. With penalties already active, this isn’t a future concern—it’s a current one.
- Know that your processor’s limits may be stricter than Visa’s. Because Visa holds processors to tighter thresholds than merchants, many processors set internal limits well below Visa’s published 2.2%. What’s “acceptable” with one processor could get you flagged with another. Be cautious of processors who seem to ignore these limits entirely— that’s a major red flag.
- Don’t assume low volume means low risk. Even if you’re not on Visa’s radar now, high ratios or a sudden spike in disputes could land you in the program quickly. Many processors are proactively closing accounts with low sales volume to clean up their portfolios.
2. Fortify Your Fraud Prevention
Reducing fraud and chargebacks is the fastest way to stay out of VAMP—and keep your processor happy.
- Use advanced fraud tools and payment authentication. Implement safeguards like 3D Secure, velocity checks, and device fingerprinting to stop fraudulent transactions before they’re approved. Strong payment authentication methods are your first line of defense against chargebacks.
- Block enumeration attacks. Prevent fraudsters from testing stolen cards on your site by limiting failed payment attempts per credit card and IP address. Watch for red flags such as repeated attempts using the same first six card digits. VAMP now tracks enumeration attacks directly—merchants with 300,000+ enumerated transactions and a ratio ≥ 20% face additional enforcement.
- Stay well below Visa’s VAMP thresholds. Keeping your fraud and dispute ratios far under the published limits gives your processor confidence and reduces your risk of VAMP penalties. The only way to reduce TC40 fraud reports is by preventing true fraud through better fraud screening, KYC, velocity checks, 3DS, etc. No alert program (Verifi, Ethoca, Order Insight, RDR) can intercept or cancel a TC40 filing.
Important: Because the VAMP ratio now double-counts fraud-related disputes (once as a TC40 and once as a TC15), most merchants will see higher ratios under the new formula. Factor this into your internal targets. If you need help with chargeback management and fraud prevention, DirectPayNet can help you build the right strategy.
How to Calculate Your VAMP Ratio
VAMP Ratio = Count of [Fraud (TC40) + All Disputes (TC15)] ÷ Count of Settled Transactions (TC05)
The VAMP ratio calculation includes fraud and non-fraud TC15 disputes on card-not-present VisaNet transactions (domestic and cross-border). Disputes resolved through pre-dispute solutions like RDR may be excluded depending on the timing of the data extract.
Estimate your VAMP ratio: Your VAMP ratio is calculated on a per-calendar-month basis by taking the total count of TC40 fraud reports and TC15 disputes and dividing by your total count of settled transactions. You won’t find your TC40 report in standard reporting portals, so you’ll need to request it from your processor. However, you can estimate it yourself: add up all your dispute and chargeback alerts (including fraud-related reason codes), then divide by your number of Visa card-not-present sales.
3. Monitor Your Ratios Monthly
Staying on top of your numbers is the best way to avoid VAMP surprises.
- Track your fraud reports and disputes every month. In VAMP terms, TC40s are fraud reports (filed by card-issuing banks when a customer claims fraud) and TC15s are disputes/chargebacks. You need to know both numbers. VAMP evaluates you monthly—what happens in one month gets flagged the next.
- Don’t wait for your processor to call you. If you’re relying on Visa or your processor to tell you there’s a problem, you’re already behind. By the time they reach out, you may already be in the penalty zone.
- Demand your data. Most merchants can’t see TC40 fraud reports in their standard dashboards—you need to request this data from your processor. If your processor won’t share it, that’s a problem. You can’t manage what you can’t measure.
4. Sharpen Your Safeguards
Proactively lowering your internal limits helps you stay ahead of VAMP enforcement.
- Set stricter internal targets. Keep your dispute and fraud ratios below Visa’s published VAMP thresholds to build a safety buffer—especially with the April 2026 reduction to 1.5% approaching.
- Reassess your risk profile. Merchants who were previously “safe” under Visa’s old rules may now be in trouble under the combined VAMP formula—especially because fraud-related disputes get double-counted.
- Act now—penalties are already live. Merchants with excessive ratios have faced fines since October 2025, and processors have been under tighter scrutiny since January 2026. The window for proactive preparation is closing fast, especially with the threshold dropping to 1.5% in April.
5. Don’t Rely on Pre-Dispute Alerts Alone
Chargeback alert tools like RDR, Order Insight, and CDRN are valuable but have limits under VAMP.
Key change: Under VAMP, RDR and CDRN no longer suppress TC40 fraud reports—they still cancel TC15 disputes (both fraud and non-fraud), which helps reduce your dispute count, but the underlying fraud signal remains. Compelling Evidence 3.0 (CE 3.0), submitted through Order Insight and accepted by the issuer, is now the only way to fully suppress TC40s and remove the fraud signal from your VAMP ratio.
🔗 Related: How Order Insights 3.0 Helps Lower Your VAMP Ratio and Prevent Chargebacks
- Keep the tools active. The data they provide is critical for spotting patterns and refining your ecommerce fraud prevention strategy. RDR and CDRN still reduce your dispute count, which matters for your VAMP ratio.
- Use alerts to act proactively. Quick action on disputes can still prevent escalation. If you receive a chargeback alert and don’t resolve it—allowing it to escalate into a TC15—it will count as two items toward your VAMP ratio (the TC40 fraud report plus the TC15 dispute).
- Prioritize Compelling Evidence 3.0. CE 3.0 is now the most powerful tool in your VAMP compliance arsenal since it’s the only mechanism that can suppress TC40s entirely. Work with your processor to ensure you’re submitting CE 3.0 through Order Insight wherever possible.
The Bottom Line
VAMP changed the rules for every merchant who accepts Visa online—and those rules are now being enforced. By acting proactively, you can protect your business and keep your processing intact. Focus on these top actions:
- Understand Your Risk — Know your VAMP ratio, know your processor’s internal limits, and track both monthly.
- Prevention over Reaction — Implement robust chargeback prevention controls. Prioritize CE 3.0 to suppress TC40 fraud reports.
- Monitor Proactively — Don’t wait for your processor to warn you—track your TC40 and TC15 reports monthly and act on trends before they become problems.
Doing these consistently will help you:
- Avoid costly VAMP fines and penalties
- Maintain your ability to accept Visa cards
- Build stronger trust with customers and processors
Coming April 1, 2026: Visa is lowering the merchant “Excessive” VAMP threshold from 2.2% to 1.5% in North America, EU, and Asia Pacific. Prepare now to avoid fines and account closures when the stricter limits take effect.
Need Help Staying VAMP Compliant? We’re Here For You.
If your dispute or fraud ratios are approaching Visa’s VAMP thresholds, penalties, account restrictions, or even a shutdown could be next. DirectPayNet provides merchant chargeback management, fraud prevention tools, and compliance support to keep your processing running.
- Chargeback alert services (RDR, Ethoca, CDRN, Order Insights) to catch disputes early
- Fraud data and VAMP ratio monitoring so you always know where you stand
- Secondary processor setup to protect revenue if your primary account faces restrictions
- Payment authentication and fraud screening tools to prevent chargebacks at the source
Learn more about our fraud and risk management services, or get in touch directly:
Call: +1 (514) 819-1174 | 1-800-657-8272
Email: [email protected]
Disclaimer: This document is provided for informational purposes only and should not be considered legal, financial, or compliance advice. The information contained herein reflects our understanding as of March 2026 and may change as Visa updates its policies or as industry practices evolve. Accuracy cannot be guaranteed. Merchants should consult directly with their payment processors, acquiring banks, or other providers to confirm current requirements and guidelines.
