Friendly Fraud

Friendly fraud — the schemes now say first-party misuse — is a chargeback raised by the genuine cardholder on a purchase they made: they did not recognise the descriptor, a family member used the card, or a refund by chargeback was easier than by the merchant. It is the largest category of card disputes by most estimates, and the merchant loses by default unless it can show the cardholder was there.

Fraud & risk · 2 min read · 10 August 2026

Also known as
First-party fraud, Chargeback fraud, First-party misuse
Used at
every merchant's chargeback statistics; the schemes' dispute rules (Visa's Compelling Evidence 3.0 of 2023 was written for it); subscription, digital goods, delivery and travel businesses see the most
Binding
the scheme dispute rules decide who wins; the cardholder's own bank's rules decide whether a dispute is even raised; there is no legal remedy against the customer in practice
Typical share
estimates from Visa, Mastercard and dispute-management vendors put first-party misuse at 50–75% of card-not-present chargebacks; the dollar cost to merchants, with fees and lost goods, runs to two to three times the transaction value
Typical defences
a recognisable payment descriptor; delivery confirmation and login records; the Compelling Evidence 3.0 rule, which lets a merchant defeat a "fraud" chargeback by showing two prior undisputed transactions from the same device or account; pre-dispute alerts and refund tools (Verifi, Ethoca) that resolve the case before it becomes a chargeback
Parties
the cardholder, their issuer (which raises the dispute), the merchant and its acquirer (which defend it), and the schemes (which arbitrate)

How friendly fraud works in practice

A cardholder sees "XYZ*ONLINE 4471" on a statement, does not recognise it, and calls the bank; the bank raises a fraud chargeback; the merchant, which sold a pair of shoes to that cardholder three weeks ago and delivered them, loses the money, the shoes and a €15–25 fee, and the chargeback counts against its ratio. Or a subscriber forgets to cancel, disputes the renewal as "not authorised", and the bank sides with its customer. Or a teenager buys game credits on a parent's card and the parent disputes. In each case the transaction was real, the merchant did nothing wrong, and the process is designed for the cardholder.

Merchants fight it at three points. Before the dispute: a descriptor that says what was bought and a support line that offers refunds faster than the bank does; alerts from the schemes' networks that flag a dispute in progress and let the merchant refund instead. At the dispute: representment with evidence — the delivery signature, the login from the cardholder's usual device, the prior purchases — and, since 2023, Visa's CE 3.0 rule that treats two matching prior transactions as proof the cardholder is a repeat customer. After: blocking customers who dispute and re-order.

For a payments company or a dispute-management vendor, friendly fraud is the market: the tools that prevent, alert and represent are sold on the share of these chargebacks they win back.

Example

A subscription streaming business receives 4,000 chargebacks a month on 600,000 renewals: 0.67%, near the scheme's monitoring threshold. Analysis: 72% are first-party — "not recognised" and "cancelled but charged" — from subscribers whose accounts show logins in the disputed month. It changes the descriptor from "STRM*SUB" to "STREAMCO.COM 0800-123", adds a one-click cancel and a refund-on-request policy, enrols in the schemes' pre-dispute alert programmes, and represents every fraud chargeback with login and device evidence under CE 3.0. Six months later: chargebacks 1,900 a month (0.31%), 45% of represented cases won, €310,000 a month recovered or prevented. The dispute vendor's fee is €40,000 a month, and the acquirer's monitoring letter is withdrawn.

Common mistakes

- A payment descriptor nobody recognises on a statement. - Refunds that take longer than the bank's dispute line. - Not representing first-party chargebacks because "the customer always wins" — under CE 3.0 the merchant often does. - Treating every chargeback as third-party fraud and buying fraud tools that cannot see a genuine cardholder. - Ignoring the ratio until the scheme's monitoring programme adds fines to the losses.

Related terms

Written by , M&A FinTech Expert.

Last updated