Chargeback Inflation: First-Party Misuse, Friendly Fraud and the Battle for Card-Not-Present Integrity

Chargeback volumes have entered a structural growth phase. Card-not-present commerce now accounts for the majority of card payment value in most developed markets, and the share of chargebacks classified as first-party misuse — where the genuine cardholder disputes a transaction they themselves authorised — has risen to a level that materially distorts the economics of e-commerce, subscription, and digital-services merchants. Industry estimates from Mastercard, Visa, and the Merchant Risk Council put global chargeback losses well above $130 billion annually when the operational, lost-goods, and downstream merchant impacts are included.

The drivers are well understood but stubborn. Frictionless commerce experiences make it easy to forget purchases; subscription models accumulate small recurring charges that go unnoticed until a balance review prompts a dispute; family members share cards and authentication credentials; and the dispute mechanism itself is, by design, biased toward the cardholder to preserve trust in the payment system. Combined with rising consumer financial pressure, these forces have made first-party misuse the fastest-growing component of total fraud loss for many merchants.

Issuers, acquirers, and merchants are responding with new tools: enhanced merchant data on dispute submissions, network-level rules such as Visa Compelling Evidence 3.0, and AI-driven dispute decisioning that better distinguishes genuine fraud from first-party misuse. Meanwhile, the regulatory and consumer-protection landscape is shifting around them, with new expectations around 3D Secure flow management, transparent merchant practices, and clearer billing descriptors.

Regulatory and Network Context

The card networks have been the most active actors in reshaping chargeback dynamics. Visa's Compelling Evidence 3.0 and Mastercard's First Party Trust programme establish data-sharing frameworks that allow merchants to demonstrate prior, undisputed customer behaviour — for example, that the same cardholder, device, and shipping address have completed similar transactions before. These programmes shift more disputes from chargebacks to issuer-handled inquiries when first-party misuse is the most likely explanation.

Regulators have approached the topic primarily through consumer protection. The UK FCA, the European Banking Authority, the US Consumer Financial Protection Bureau, and the Australian ASIC have all issued guidance pushing merchants toward clearer billing descriptors, easier cancellation flows, and more transparent subscription practices. The combined effect is a regulatory environment that expects merchants to remove the ambiguity that fuels first-party misuse, while expecting issuers and acquirers to apply genuine analytical judgment rather than reflexively granting refunds.

What the Data Is Showing

Merchant Risk Council and LexisNexis chargeback data shows that first-party misuse has grown to between 60% and 75% of total disputes for many merchant categories — particularly streaming, gaming, digital downloads, and travel. The cost is not just the disputed amount: it includes the operational cost of evidence submission, the secondary impact of representment fees, and the loss of inventory or service in the meantime. For high-volume merchants, these costs compound quickly into nine-figure annual exposures.

Authentication data tells the other half of the story. Strong customer authentication via 3D Secure 2.x is reducing both genuine fraud and first-party disputes where issuers can show authentication was completed. However, merchants over-applying 3DS create checkout friction that drives cart abandonment and pushes customers to competitors, while under-applying it leaves them exposed to disputes they cannot defend. The optimisation problem — when to authenticate, when to risk-score, when to pass through frictionless — has become a central commercial as well as risk question.

Implications for Financial Institutions and Merchants

Issuers and acquirers need to invest in dispute decisioning that genuinely distinguishes fraud from first-party misuse. This requires combining transaction history, device intelligence, network-shared evidence, and behavioural signals — and resisting the operational tendency to treat all disputes as equally indeterminate. Issuers that get this right protect both their customers and their merchant relationships; those that do not encourage opportunistic disputing and increase merchant frustration with the network.

Merchants need to invest in three layers: prevention through clear billing descriptors, friction-aware authentication, and customer-service responsiveness; representment through high-quality evidence and use of network compelling-evidence frameworks; and analytics through real-time dispute monitoring, customer-segment risk scoring, and identification of the specific products or flows that drive disproportionate dispute volumes. Each layer pays back independently, but the gains compound when applied together.

Conclusion

Chargebacks have moved from a back-office card-operations issue to a strategic question about the integrity of card-not-present commerce. First-party misuse will not be eliminated, but it can be materially reduced by combining better merchant practices, better issuer analytics, and the network programmes designed precisely for this challenge. Institutions that treat the dispute lifecycle as a single end-to-end problem will reduce loss, improve customer experience, and strengthen merchant relationships simultaneously.

Suggested Next Steps

• Quantify your first-party-misuse share of total chargeback volume by merchant category, channel and customer segment — this is the prerequisite for any targeted intervention.

• Adopt and operationalise network compelling-evidence frameworks (Visa CE 3.0, Mastercard First Party Trust) end-to-end so eligible disputes are diverted from chargeback to inquiry.

• Optimise your 3D Secure strategy with risk-based flows that authenticate where it materially reduces dispute exposure and stay frictionless where the data supports it.

• Review your billing descriptors, subscription cancellation flows and customer-service responsiveness — many disputes are easier to prevent in the customer journey than to win at representment.

Sources: Visa Compelling Evidence 3.0 Documentation; Mastercard First Party Trust Programme Materials; Merchant Risk Council Global Fraud Survey 2025; LexisNexis True Cost of Fraud 2025; UK FCA Consumer Duty Guidance; US Consumer Financial Protection Bureau Subscription Practices Bulletin.

TrustSphere Risk Index — Vendor Spotlight

The TrustSphere Risk Index is our independent assessment of the global fraud, financial crime and identity vendor landscape. The March 2026 edition covers 221 vendors across eight functional categories — Risk Orchestration, Enterprise FRAML & Decisioning, Identity / eKYC / KYB Onboarding, Behavioural & Device Intelligence, AML Data, Screening & Regulatory Intelligence, FRAML Technology Stack, Deepfake Detection, and adjacent specialist categories — each scored across eleven capability dimensions including fraud detection, transaction monitoring, identity verification, watchlist screening, and regulatory intelligence.

This week's vendor spotlight is Sardine, which scored 51% on the TrustSphere Risk Index in the Behavioural & Device Intelligence category. Sardine offers an all-in-one fraud, compliance and payments platform that combines real-time transaction monitoring, device intelligence and behavioural analytics — purpose-built for high-volume card-not-present and digital-payments use cases. For merchants and issuers fighting chargeback inflation and first-party misuse, Sardine's joined-up view of behaviour, device and transaction risk provides exactly the evidence base required to operate Visa Compelling Evidence 3.0, Mastercard First Party Trust and risk-based 3DS strategies effectively.

If you would like a comprehensive vendor suitability assessment for your institution — mapped to your specific use cases, regulatory footprint, and target architecture — please contact TrustSphere directly. The full Risk Index, peer benchmarks and tailored shortlist work is available on request.

TrustSphere helps financial institutions design and deploy intelligent fraud and financial crime detection solutions. Visit www.trustsphere.ai