Friendly Fraud: What It Is and How Merchants Fight It

Friendly fraud is when a real customer disputes a real purchase with their card issuer instead of asking you for a refund. Sometimes it is an honest mistake, like a forgotten subscription or a confusing statement line. Sometimes it is deliberate. Either way, the money comes out of your account first, and you have to prove the sale was valid to get it back.

This guide explains how friendly fraud chargebacks work under U.S. rules, how to tell them apart from true fraud, what evidence actually wins, and a step-by-step plan to cut them down.

What is friendly fraud?

Visa describes it as a case where a cardholder “disputes a legitimate transaction that they made or someone in their household made” (Visa). The industry also calls it first-party misuse or first-party fraud. The key word is legitimate.

The card was not stolen. The person who paid, or someone close to them, got what they ordered.

That is what makes it so frustrating for merchants. You did everything right, and you still lose the sale, the product, and a dispute fee. On top of that, the chargeback lands on your record with your processor.

It is not a small problem. Visa says friendly fraud makes up about 20 percent of fraudulent disputes worldwide, and up to 30 percent for high-volume online sellers. Mastercard, citing its 2025 State of Chargebacks report, says nearly half of chargebacks are reported as fraud and forecasts chargeback costs reaching $42 billion by 2028 (Mastercard).

The three types of first-party disputes

Disputes from real customers tend to fall into three groups, and each one needs a different fix.

• Confusion. The customer doesn’t recognize the charge. Your statement name doesn’t match your website, or they forgot about an annual renewal.
• Household use. A spouse, teenager, or roommate used a card saved in a browser or app. The cardholder honestly believes it is fraud.
• Abuse. The customer knows they bought it, used it, and files a dispute anyway. This is sometimes called “cyber-shoplifting.”

Many merchants assume deliberate abuse drives most cases. Whatever the mix looks like in your business, confusion is the cheapest group to fix, so start there: a clearer descriptor and a renewal email cost almost nothing.

How a friendly fraud chargeback works

Here is the usual path, start to finish:

1. The customer buys from you online. The charge is authorized and the order ships or access is granted.
2. Weeks later, they call their bank or tap “dispute” in a banking app.
3. The issuing bank files a chargeback under a reason code, often a fraud code or a “not received” code.
4. Your processor pulls the funds back from your account and usually adds a chargeback fee.
5. You get a short window to respond with evidence. This step is called representment.
6. The issuer reviews your evidence and decides who keeps the money.

Because most online orders are card-not-present transactions, the merchant usually carries the fraud liability. That is why the evidence you collect at checkout matters so much later.

Why banks side with cardholders first

U.S. law gives credit card holders strong dispute rights. Under Regulation Z, a “billing error” includes charges for goods or services the cardholder did not accept or that were not delivered as agreed. The cardholder has 60 days after the first statement showing the charge to send notice, and the issuer must resolve it within two complete billing cycles, and no later than 90 days (CFPB).

The FTC also reminds consumers that federal law caps their liability for unauthorized credit card charges at $50 (FTC). Card networks layer their own dispute rules on top of these laws, and those rules can cover situations federal law doesn’t. The result is a system built to protect cardholders. It works well against real fraud, but it also makes a false claim cheap to file.

Friendly fraud vs chargeback fraud vs true fraud

People use these terms loosely, but the difference changes how you respond. Use this table to sort a dispute before you decide whether to fight it.

Be honest with yourself on the last row. If a customer asked for a refund and got no reply, the chargeback is on you, not them.

What one disputed order really costs: a worked example

Let’s put numbers on one dispute. These figures are an illustration, not a quote; your fees depend on your processor and contract.

Say you sell a $180 skincare bundle. Your product and shipping cost is $55. Your processor charges a $25 chargeback fee. A customer receives the bundle and later tells the bank they never got it.

• Lost sale: $180 pulled back from your account.
• Lost goods: $55 you already spent.
• Chargeback fee: $25, often charged whether you win or lose.
• Staff time: 30 to 45 minutes to pull tracking, emails, and screenshots.

If you lose, that one order costs you about $260 plus labor. Now multiply it by 15 disputes a month.

The bigger risk is not the cash. It is your ratio. Too many disputes can push you into a card network monitoring program, raise your pricing, or lead your processor to hold a rolling reserve. Visa’s Acquirer Monitoring Program adds fraud reports and disputes together and divides them by settled transactions. Since April 1, 2026, a U.S. merchant at 1.5% or more, with at least 1,500 of those reports in a month, is rated “excessive.” Our guide to the chargeback ratio explains how those thresholds work, and high-risk merchant account fees shows how dispute history feeds into pricing.

Visa Compelling Evidence 3.0: your best counter to false fraud claims

Many first-party disputes come in as “card-absent fraud.” For Visa, that is dispute condition 10.4. Since April 15, 2023, Visa’s Compelling Evidence 3.0 (CE3.0) rules give merchants a clear way to answer these claims (Visa CE3.0 merchant readiness).

In plain terms, you need to show:

• Two earlier transactions on the same card, with your business, that were never disputed or reported as fraud.
• The right age. Those orders must be at least 120 days old and no more than 365 days old, counted from the dispute date.
• Matching data. At least two of four data points must match between the old orders and the disputed one: user ID, IP address, shipping address, or device ID/fingerprint.
• One technical match. At least one of those matches must be the IP address or the device ID.

Here is a typical example.

A customer of an online course company disputes a $97 renewal as fraud. Your records show two earlier payments from the same card, made 140 and 300 days ago. All three orders came from the same account login and the same device. That case now has strong evidence behind it.

Your acquirer submits this order history through Visa’s dispute system, and Visa’s readiness guide says only one submission attempt is allowed; incorrect or incomplete submissions are declined. Check that your processor can pull the right fields before you need them.

The catch: you can only use CE3.0 if you stored that data in the first place. Many small merchants don’t log IP addresses or device IDs at checkout. If you work with a developer or agency, ask them to capture these fields now. Our payment gateway integration guide covers what to pass through your gateway.

What about Mastercard?

Mastercard runs a First-Party Trust program, which started in the U.S. It lets merchants share richer data, such as purchase history, device details, and delivery information, either at authorization or once a dispute is raised. Merchants who meet its data-sharing rules can get chargeback protection on qualifying disputes. Ask your processor whether your setup supports it.

The evidence that wins, by business type

Generic advice says “keep good records.” That’s not enough. Issuers want proof that matches the claim. Here is what to keep for the most common online business models.

If you sell digital products or memberships, usage logs are your strongest weapon. For online courses and coaching, a signed agreement plus attendance records does most of the work. Travel businesses face long gaps between payment and service, so keep every confirmation.

How to prevent friendly fraud: a step-by-step plan

You can’t stop every bad-faith dispute. But you can remove most of the reasons honest customers file them. Work through these steps in order.

1. Fix your billing descriptor. Make the name on card statements match your brand or website. Add a phone number or URL if your processor allows it.
2. Make refunds easier than disputes. Put your refund policy at checkout and in every receipt. Answer refund requests within one business day.
3. Send renewal reminders. Email customers before an annual or trial-to-paid charge. Our subscription billing risk checklist covers timing and cancellation flows.
4. Capture CE3.0 data at checkout. Log IP address, device ID, account login, and shipping address for every order.
5. Confirm delivery in writing. Send a “your order arrived” or “your access is ready” email. Customers who see it rarely claim non-receipt.
6. Use dispute alerts where available. Pre-dispute tools can let you refund before a case becomes a chargeback. Ask your processor what it supports.
7. Flag repeat disputers. After a confirmed false chargeback, block that customer from future orders and revoke digital access.
8. Review your disputes monthly. Group them by reason and product. Patterns point straight to the fix.

For a broader set of tactics, see our chargeback prevention guide.

When to fight a dispute (and when to let it go)

Not every dispute is worth your time. A quick rule of thumb: fight when you have proof that matches the reason code, and the order value is worth the effort. Accept when the customer has a fair point or your evidence is thin.

A common mistake is sending a pile of generic documents. Issuers don’t read 20 pages.

Send a short cover note, then only the evidence that answers the specific claim. If the claim is “not received,” lead with the delivery scan. If it is “unauthorized,” lead with your CE3.0 order history.

Also remember that winning a case doesn’t erase it. The chargeback still counts in your ratio. That’s why prevention matters more than representment, especially if your business is in a category that underwriters already treat as high-risk.

Common mistakes that invite more disputes

• Hiding the cancel button. If customers can’t find a way out, they’ll use their bank instead.
• Using a parent company name on statements. “ABC Holdings LLC” means nothing to a customer who bought from “GlowSkin.”
• Refunding after the chargeback. Once a dispute is filed, a refund can mean you pay twice. Respond through the dispute process instead.
• Missing response deadlines. A late reply is an automatic loss, no matter how good your proof is.
• Not storing checkout data. Without IP and device records, CE3.0 is off the table.

If disputes are already eating into your margins, our chargeback management support can help you sort, respond, and track cases.

Related guides and next steps

• Worried about your dispute rate? Read What Is a Chargeback Ratio? to see where the limits are.
• Want a full prevention playbook? Use the chargeback prevention guide.
• Run subscriptions or memberships? See subscription payment processing and our guide on how to accept recurring payments without surprising customers.
• Curious what underwriters look at? Read Merchant Account Underwriting: What Underwriters Check.
• Ready to apply? Start with the merchant account approval checklist.

Frequently asked questions

What is meant by friendly fraud?

It means a cardholder disputes a purchase they or someone in their home really made. The card wasn’t stolen. The dispute may come from confusion, a family member’s use of a saved card, or a deliberate attempt to get money back while keeping the product.

Is friendly fraud illegal?

Knowingly filing a false dispute to get goods for free can be treated as fraud, but outcomes depend on the facts and the state. In practice, few cases go to court. Merchants usually respond through the dispute process and block repeat offenders. Talk to an attorney if you see a large, organized pattern.

What is the difference between friendly fraud and chargeback fraud?

Many people use the terms interchangeably. When they are separated, “chargeback fraud” usually means the intentional kind, where the customer knows the charge is valid. “Friendly fraud” is the wider term and includes honest mistakes.

Can merchants win friendly fraud chargebacks?

Yes, when the evidence matches the claim. Delivery scans, login and usage logs, signed terms, and Visa CE3.0 order history all help. Winning gets the funds back, but the dispute still counts toward your chargeback ratio.

How long does a customer have to dispute a charge?

Under federal billing-error rules, a credit card holder must give written notice within 60 days after the first statement showing the error. Card network rules set their own timeframes, which can be longer for some dispute types. Keep your records for at least a year after each sale.

Sources and further reading

• Visa: Friendly fraud explained: prevention and solutions
• Visa: Compelling Evidence 3.0 Merchant Readiness
• Visa: Visa Acquirer Monitoring Program Fact Sheet
• Mastercard: To counter “friendly” fraud, Mastercard expands technology to new markets
• Consumer Financial Protection Bureau: Regulation Z, 12 CFR 1026.13 Billing Error Resolution
• Federal Trade Commission: Using Credit Cards and Disputing Charges

Want a processing partner that takes disputes seriously? Payment Circle helps new U.S. online merchants set up merchant accounts with clear terms, interchange-plus pricing, and chargeback support.

Apply for a merchant account or call us at (571) 274-7950, 9:00 AM to 6:00 PM Eastern. You can also contact our team with questions.