What Is Mastercard GMAP? A Readiness Guide for Merchants, Acquirers, PayFacs, and ISOs

Mastercard’s Global Merchant Audit Program, also known as GMAP, is expected to change how fraud, disputes, merchant performance, and portfolio exposure are monitored across the payments ecosystem.

Scheduled to begin in April 2027, GMAP represents a broader shift in how merchant risk may be evaluated. For many teams, it can be thought of as Mastercard’s VAMP-style move toward more structured monitoring, visibility, and accountability.

That matters for merchants. It also matters for acquirers, processors, PayFacs, ISOs, and risk teams responsible for managing merchant portfolios.

Fraud Deflect created two GMAP readiness guides to help teams understand what is changing and what to do next:

• Merchant Guide — for businesses accepting card payments.

• Partner / Acquirer Guide — for acquirers, processors, PayFacs, ISOs, and portfolio risk teams.

  
  

What Is Mastercard GMAP?

GMAP stands for Global Merchant Audit Program. It is a Mastercard merchant monitoring framework expected to affect how fraud, disputes, merchant performance, and portfolio-level exposure are reviewed.

In simple terms, GMAP is designed to give the payments ecosystem a broader view of merchant risk.

Instead of looking at one issue in isolation, teams may need to understand how fraud activity, customer disputes, chargebacks, and merchant performance connect to overall exposure.

For merchants, that means more attention on account-level activity.

For acquirers, processors, PayFacs, ISOs, and portfolio teams, that means more attention on how individual merchant behavior can create broader risk across a portfolio.

When Does GMAP Start?

Mastercard GMAP is expected to begin in April 2027.

That timeline gives merchants and portfolio teams time to review their current fraud, dispute, and chargeback performance before the program takes effect.

But preparation should not wait until 2027.

Fraud and dispute exposure can build quietly over time. By the time a merchant is flagged or a portfolio issue becomes visible, remediation may already be more difficult, expensive, and disruptive.

Why Does GMAP Matter?

GMAP matters because it may change how teams think about merchant monitoring.

For merchants, GMAP may increase the importance of:

• reducing avoidable disputes;

• preventing fraud before it reaches the network;

• improving customer resolution paths;

• monitoring refund and chargeback patterns;

• protecting processing account health.

For acquirers, processors, PayFacs, ISOs, and portfolio risk teams, GMAP may increase the importance of:

• identifying risky merchants earlier;

• monitoring merchant-level trends across the portfolio;

• helping merchants remediate before issues escalate;

• improving visibility into fraud and dispute exposure;

• reducing portfolio-level risk before it becomes a compliance problem.

In short: GMAP is not only a merchant issue. It is also a portfolio visibility issue.

Is GMAP Similar to Visa VAMP?

GMAP is not the same program as Visa VAMP.

However, many payments teams may understand GMAP as a Mastercard VAMP-style shift because both programs reflect a broader move toward integrated monitoring of fraud, disputes, and merchant risk.

The key point is not that GMAP and VAMP are identical.

The key point is that both programs signal the same direction: payment networks are increasing pressure on merchants and portfolio teams to reduce risk earlier, before fraud and disputes become bigger problems.

Who Needs to Prepare for GMAP?

GMAP is relevant for any team involved in merchant risk, fraud prevention, chargeback management, dispute resolution, or payment performance.

That includes:

• merchants accepting card payments;

• ecommerce and subscription businesses;

• acquirers;

• processors;

• PayFacs;

• ISOs;

• payment service providers;

• risk and compliance teams;

• fraud prevention teams;

• chargeback operations teams;

• portfolio risk managers.

If your team is responsible for preventing fraud, reducing disputes, protecting merchant accounts, or managing merchant portfolios, GMAP should be on your roadmap.

Which GMAP Guide Should You Download?

Choose the Merchant Guide if you are a business accepting card payments and want to understand how GMAP may affect your fraud, dispute, and merchant performance exposure.

Choose the Partner / Acquirer Guide if you manage merchant portfolios, processing relationships, PayFac exposure, ISO relationships, risk operations, or compliance programs.

If both apply, you can download both guides by completing the form once for each role.

What Merchants Should Review Before GMAP

Merchants should start by reviewing the activity that can lead to fraud, disputes, chargebacks, and account-level performance issues.

Key areas to review include:

• fraud rates and fraud patterns;

• dispute and chargeback volume;

• refund behavior;

• customer service response times;

• unclear billing descriptors;

• subscription cancellation flows;

• fulfillment and delivery issues;

• product or service mismatch complaints;

• high-risk traffic sources;

• recurring customer complaint themes.

The goal is to reduce preventable disputes and fraud before they become reportable problems.

What Acquirers, Processors, PayFacs, and ISOs Should Review Before GMAP

Portfolio teams should prepare by improving visibility into merchant-level activity.

Key areas to review include:

• merchants with rising fraud or dispute trends;

• sub-merchants creating disproportionate exposure;

• merchant categories with higher chargeback risk;

• onboarding and underwriting criteria;

• remediation workflows;

• fraud and dispute reporting processes;

• portfolio segmentation by risk level;

• communication plans for affected merchants;

• escalation paths for merchants approaching monitoring thresholds.

The goal is to identify risk earlier and help merchants take action before exposure becomes harder to manage.

How Fraud Deflect Helps Teams Prepare for GMAP

Fraud Deflect helps merchants and portfolio teams reduce fraud and dispute exposure upstream.

That means helping teams act before problems become chargebacks, monitoring events, or account health issues.

Fraud Deflect supports GMAP readiness by helping teams:

• block fraud before it creates downstream exposure;

• deflect avoidable disputes before they become chargebacks;

• identify merchant-level risk signals;

• improve visibility into dispute and fraud patterns;

• support acquirers, processors, PayFacs, ISOs, and merchants with practical remediation strategies.

GMAP preparation starts with understanding where risk is coming from. Fraud Deflect helps teams reduce that risk before it escalates.

Download the GMAP Readiness Guide

GMAP is expected to begin in April 2027. Now is the time to understand what is changing, how it may affect your role, and what your team should review next.

Fraud Deflect created two readiness guides:

Merchant Guide
For businesses accepting card payments.

Partner / Acquirer Guide
For acquirers, processors, PayFacs, ISOs, and portfolio risk teams.

FAQ

What does GMAP stand for?

GMAP stands for Global Merchant Audit Program. It is a Mastercard merchant monitoring program expected to affect how fraud, disputes, merchant performance, and portfolio exposure are reviewed.

When does Mastercard GMAP begin?

Mastercard GMAP is expected to begin in April 2027.

Who should prepare for GMAP?

Merchants, acquirers, processors, PayFacs, ISOs, payment service providers, fraud teams, chargeback teams, compliance teams, and portfolio risk teams should prepare for GMAP.

Is GMAP only for merchants?

No. GMAP matters for merchants, but it also matters for acquirers, processors, PayFacs, ISOs, and portfolio teams that manage merchant-level risk.

Is GMAP the same as Visa VAMP?

No. GMAP and Visa VAMP are separate programs. However, GMAP can be understood as a Mastercard VAMP-style shift because it reflects broader monitoring of fraud, disputes, and merchant risk.

Which GMAP guide should I download?

Download the Merchant Guide if you accept card payments as a business. Download the Partner / Acquirer Guide if you manage merchant portfolios, processing relationships, PayFac exposure, ISO relationships, or risk operations.