Visa Changed the Rules: What VAMP Means for Online Merchants

Visa Changed the Rules: What VAMP Means for Online Merchants

A major shift in fraud and dispute monitoring is already underway, and most online merchants aren’t prepared.

On April 1, 2025, Visa launched a new program that changes how risk is measured, enforced, and penalized.

If you process card-not-present (CNP) payments, this affects you now.

What Is VAMP (Visa Acquirer Monitoring Program)?

VAMP (Visa Acquirer Monitoring Program) is a unified framework that combines fraud and dispute monitoring into a single compliance system.

Instead of tracking fraud and chargebacks separately, VAMP merges them into one metric, making it significantly harder to stay below risk thresholds.

Key change:

• Before: Fraud and disputes were tracked separately (VFMP + VDMP)

• Now: Everything is combined into one ratio

• This means your risk can increase overnight, even if your business hasn’t changed.

What Is the VAMP Ratio?

The core of the program is the VAMP Ratio, which determines your compliance level.

Formula:

• VAMP Ratio = (TC40 Fraud Reports + Chargebacks) ÷ Total Settled Transactions

What each component means:

• TC40 Fraud Reports → Fraud flagged by issuing banks

• Chargebacks → Disputes initiated by customers

• Total Transactions → All settled Visa transactions

Why TC40 Changes Everything

This is the most misunderstood, and most dangerous, part of VAMP.

Before VAMP:

• TC40 fraud reports were mostly invisible to merchants

• They didn’t directly impact your dispute rate

Now:

• TC40 + chargebacks = ONE metric

• You are accountable for fraud you may not even see

• This alone can dramatically increase your ratio

Why VAMP is a big shift

VAMP is more than a technical update: it’s a structural shift in how risk is measured.

Most merchants are still treating it like a minor compliance change, when in reality, it’s already reshaping how acquirers evaluate risk.

If you want a deeper perspective on what this means for online merchants and why many are already at risk without realizing it, read this breakdown:

Visa Changed the Rules. Most Online Merchants Don’t Know It Yet

Example: How a Merchant Becomes “High Risk” Overnight

Let’s break it down:

• 5,000 transactions

• 35 chargebacks

• 150 TC40 fraud reports

Old system:

• Chargeback rate = 0.7% → acceptable

Under VAMP:

• Combined ratio = 3.7% → well above threshold

  
  

Same business. Same data. Completely different risk profile.

This type of scenario is becoming increasingly common under VAMP and most merchants only realize it after their ratios spike.

• You can see the full breakdown and calculation inside the VAMP Guide.

  
  

VAMP Thresholds You Need to Know

Merchant thresholds:

• 2.20% → Current excessive threshold

• 1.50% → Starting April 2026

Acquirer thresholds (more aggressive):

• 0.40% → Early warning

• 0.50% → Above standard

• 0.70% → Excessive

Critical insight:

• Many acquirers are already enforcing ~0.4% internally, far below Visa’s official threshold.

• If you don’t know your target number, you’re already behind.

What Is Enumeration Risk in VAMP?

VAMP also introduces enumeration monitoring.

What it means:

• Bots test stolen card numbers on your checkout

• High attempt rates = fraud signal

New rule:

• If >20% of attempts are flagged as enumeration:

  • You may face fines

  • You risk losing processing privileges

High-risk business models:

• Free trials

• Subscription services

• Low-ticket products

• Digital goods

Who Is Most Affected by VAMP?

Certain industries are structurally more exposed:

• Subscription businesses

• SaaS platforms

• Streaming services

• Gaming

• Digital goods

• Nutraceuticals

• High-volume e-commerce

Why?

They naturally generate:

• More disputes

• More forgotten subscriptions

• More fraud attempts

Many are already above thresholds, without knowing.

VAMP Penalties and Compliance Timeline

Grace period:

• 3 months for first violation (within 12 months)

After that:

• $8–$40 per flagged transaction

• Increased reserves

• Stricter underwriting

• Possible account termination

How to Reduce Your VAMP Ratio

To stay compliant, you need more than basic fraud tools.

1. Know your real ratio

• Request TC40 data from your PSP or acquirer

• Calculate your actual exposure

2. Don’t rely only on post-dispute solutions

• Visa RDR

• Verifi CDRN

• Ethoca Alerts

• But note: Even resolved disputes may still impact your ratio.

3. Stop fraud upstream

• AVS & CVV checks

• Velocity rules

• Real-time fraud detection

4. Reduce customer confusion

• A large share of disputes is not fraud. Fix:

  • Billing descriptors

  • Cancellation flows

  • Communication on recurring charges

5. Talk to your acquirer NOW

• Ask for your real threshold

• Understand enforcement timelines

• Waiting is the biggest risk.

Why VAMP Is More Dangerous Than It Looks

VAMP is not just another compliance update.

It represents:

• Consolidation of fraud + disputes

• Increased issuer visibility

• Stronger enforcement by acquirers

And most importantly: The inclusion of TC40 makes invisible risk visible.

Final Takeaway

VAMP is already live. The threshold is tightening in 2026.

And the gap between what merchants track and what Visa measures has never been bigger.

If you don’t understand your VAMP ratio today, you’re operating without visibility into your real risk.

Want the Full Breakdown?

If you want to understand exactly where you stand — and how to fix it — start here:

The full Fraud Deflect VAMP Guide includes:

• Detailed threshold breakdowns

• Industry benchmarks

• Calculation templates

• Compliance checklist