Visa Widens Chargeback Evidence Rules From Oct. 24

Visa will let merchants cite purchase history from other merchants and token credentials in card-not-present fraud disputes processed on or after Oct. 24, per a Pulse analysis.

If you run a high-ticket store, this is a chargeback story with real dollars attached, and it is the kind of rule change we track at Ecommerce Paradise. One lost fraud dispute on a $3,000 order costs more than the order. Wider evidence rules give you more ways to win, but only if your data is captured, stored and handed to your processor in the right shape before the cutover.

Below: exactly what changes, the monitoring pressure behind it, and the checklist I’d run this week. If you are still learning the model, start with my guide to high-ticket dropshipping and then come back.

Chargeback losses and processor reserves land on whichever entity holds your merchant account, so make that entity an LLC you formed on purpose. Northwest Registered Agent is the best LLC formation service for ecommerce owners, and it forwards your physical mail if you run the store from outside your formation state or country, which matters when dispute letters and bank notices arrive on paper. Form your LLC with Northwest →

Visa Compelling Evidence 3.0 Changes Take Effect Oct. 24

According to a Sept. 24 analysis by Kyle Hall, founder of Pulse, the change applies to disputes processed on or after Oct. 24, 2026. It rewrites what counts as a qualifying prior purchase under Visa’s Compelling Evidence 3.0 framework, the evidence path merchants use to fight card-absent fraud claims under reason code 10.4.

Pulse lists four substantive changes. Prior undisputed transactions may now come from one or more merchants, not only the merchant defending the dispute. The same card, or a credential associated with it such as a token, can be used instead of requiring the identical payment credential. The purchase order number alternative extends to ECI 7 ecommerce transactions that carry a valid CAVV from Visa Secure, a valid TAVV from Visa Token Service, or a valid Match Key from Visa’s Intelligent Data Exchange API. And login IDs from an agentic payment provider now count as account or login ID elements.

The baseline mechanics stay the same. Per Pulse, a merchant still needs two qualifying prior transactions. Those prior transactions must be processed more than 120 calendar days before the dispute and no more than 365 days before its processing date. Device IDs must be at least 15 characters, and device fingerprints at least 20 characters derived from at least two properties. A device ID and a device fingerprint together count as one element, not two.

A second source describes the same cutover from the network-fee side. Merchant Cost Consulting’s October 2026 interchange and network update, published Oct. 2, says Dispute Condition 10.4 on Oct. 24 will cover transactions on all credentials tied to the same card, including additional tokens, if they share common data elements. It also says Visa clarifies Condition 12.2 so that dispute rights exist when a merchant processes a new transaction to correct an error instead of a reversal.

Other network changes landing the same fortnight

The same Merchant Cost Consulting list includes several items that touch card-not-present stores. On Oct. 25, Response Code 57 moves into Visa’s Issuer Will Never Approve reattempt program, and the firm warns that retries can trigger System Integrity Fees, so recurring billing logic should stop on a 57. Discover will require merchants supporting card-not-present sales to support its Card Account Verification Service from Oct. 23.

On the Mastercard side, the firm reports that the Decline Service Fee rises from 0.03% to 0.06% in October, with the minimum eliminated and the maximum dropping from $0.12 to $0.06. It also lists a $25 progressive handling fee for chargebacks under reason codes 4807 and 4808 on non-face-to-face transactions. That fee is refunded if you win with proof of valid authorization, and an additional $50 may apply if the dispute goes to arbitration. I could not find a second source for the Mastercard fee amounts, so treat the figures as reported by one firm and confirm them with your acquirer.

Where the evidence rules have limits

Pulse flags a catch. A footnote says that for disputes processed on or after Oct. 24, “an acquirer may only submit transaction data it accepted and processed itself” in pre-arbitration. In plain terms, the multi-merchant evidence is limited at that stage to transactions your own acquirer processed. Pulse says how other merchants’ evidence would be assembled at the pre-dispute stage is unsettled.

Pulse also notes that issuers have 120 calendar days from the transaction processing date to report fraud, acquirers have 30 calendar days from the dispute processing date to attempt pre-arbitration, and issuers have 30 days to respond. The firm estimates that retaining data for less than about 13 months discards usable history.

Why Visa Chargeback Rules Keep Tightening: VAMP at 1.5%

This is not a one-off tweak. Visa has been tightening dispute oversight for two years, and merchants have been getting squeezed from both directions.

Per a Solidgate explainer on Visa’s rules, Compelling Evidence 3.0 has been in force since April 15, 2023, and lets a merchant submit two prior undisputed transactions that share at least two data points with the disputed order, such as IP address, email, physical address or phone number. The same explainer says the Visa Acquirer Monitoring Program, known as VAMP, replaced the separate dispute and fraud monitoring programs on April 1, 2025, and that the merchant threshold dropped from 2.2% to 1.5% on April 1, 2026.

VAMP’s ratio is fraud reports plus disputes divided by settled card-not-present transactions, according to Solidgate, and monitoring applies after 1,500 disputes, with fees of roughly $8 per disputed or fraudulent transaction. A SeamlessChex post published Sept. 29 repeats the 1.5% merchant threshold and tells merchants to ask their acquirer for its internal VAMP limit in writing. Both pieces are vendor marketing, and SeamlessChex sources several figures from podcasts and videos, so check thresholds against Visa’s own merchant dispute management guidelines and your acquirer agreement before acting on any of them.

Pulse adds a timing detail that matters for the ratio. A case closed after the monthly extract does not reduce that month’s VAMP ratio.

The squeeze on card economics

The fee side is moving too. Payments Dive reported on June 9 that U.S. District Judge Brian Cogan gave preliminary approval to the Visa and Mastercard interchange settlement, covering about 12 million merchants. Terms include a 10 basis point cut to credit interchange rates for five years and a 1.25% rate on standard consumer cards for eight years. Merchants paid a 2.35% weighted average fee on Visa and Mastercard transactions in 2024, per the Nilson Report, the same article says.

The settlement also lets merchants decline some premium and commercial credit cards and gains new surcharging and discount rights. A trade group, NACS, said it plans to appeal if final approval is granted. I covered the political side of card fees in my post on the Credit Card Competition Act push, and the point holds here: the networks are conceding on price while tightening the rules around fraud and disputes.

Counterpoint: the change helps, but not evenly

The honest read is that this is mostly good news for merchants. More evidence is admissible, and tokens stop breaking the link between a customer’s old and new payment credentials. The catch is execution. Pulse itself says parts of the multi-merchant mechanics are unsettled, and the pre-arbitration footnote narrows the benefit. No source I found says how fast Shopify Payments, Stripe, PayPal or any other processor will wire these fields into their dispute tools.

What Visa’s Evidence Change Means for High-Ticket Stores

Everything from here down is my read, not reporting.

First-order impact: a high-ticket store has a small number of large orders, which makes every fraud dispute expensive and every ratio swing violent. Hypothetical math, not a reported figure: a store sells at a $3,000 average order with a 25% gross margin, or $750 per order. One lost fraud chargeback costs the $3,000 of product plus fees, which is the margin on four orders. Win one extra dispute a month through the wider evidence rules and you keep roughly $3,000 a month, about $36,000 a year.

The same store at 300 orders a month hits a 1.5% VAMP ratio with just 4.5 combined fraud reports and disputes. Solidgate says monitoring only applies after 1,500 disputes, so a store this size is unlikely to be inside the program on its own. Your processor can still tighten its internal limits well before Visa does, which is why SeamlessChex’s advice to get your acquirer’s limit in writing is worth taking. My guide on chargeback prevention for high-ticket stores covers the prevention side in depth.

Scenario one: a repeat customer buys again on a new card token

A customer bought a $2,400 grill island in March and a $3,100 outdoor kitchen package in October. Apple Pay generated a different token each time, and the customer then claims fraud. Before the change, matching that history was harder because the credential was not identical. After Oct. 24, the same card or an associated token can anchor the prior-purchase evidence, according to Pulse. You win more of those, if your processor submits it.

Scenario two: a first-time buyer with no history

CE 3.0 does nothing for a customer with no prior undisputed purchases. For these orders, your defense is the old stuff: proof of delivery, signed receipts, matching billing and shipping, and phone verification. This is where a high-ticket store has an edge over a $40 impulse-buy shop, because you can pick up the phone. My post on high-ticket sales follow-up shows how to turn that call into a record.

Scenario three: agent-initiated orders

Pulse says login IDs from an agentic payment provider now count as account elements. That is a small line with a big signal. Visa is writing agent checkout into dispute rules, and Shopify and Stripe are joining Meta’s personal agent protocol. If orders arrive via AI agents next quarter, your evidence will include agent identifiers you do not capture today.

The data you have to keep

Pulse’s retention estimate is the part most store owners will miss. The lookback is 365 days plus a 30-day pre-arbitration window, and anything under about 13 months of searchable history throws away evidence. Shopify keeps order records, but the supporting items, such as device identifiers and checkout logs, often live in third-party fraud tools, helpdesk exports and email platforms that purge on their own schedule. Check each one.

Your support and shipping stack carries evidence too. A helpdesk like Gorgias holds the customer conversation that proves a buyer knew about the order. A tracking app like AfterShip holds the delivery scans and timestamps. Treat both as dispute records, not just operations tools.

If getting this set up sounds like a second job, that is the point where my team’s turnkey done-for-you service earns its keep, because the build includes the payment, fraud and support plumbing that dispute evidence depends on.

Dispute evidence, order data and ad spend all get easier when someone runs the system every day. If you want my team to scale the store you already have and tighten the operations behind it, take a look. See the scaling service →

Chargeback Evidence Checklist Before Visa’s Oct. 24 Cutover

Six moves, in the order I’d do them. None of them cost much, and most take under an hour.

Email your processor today and ask three questions in writing. Will you submit CE 3.0 evidence that uses tokens or other-merchant history, when does it start, and what fields do you need from me? Also ask for your account’s internal dispute ratio limit, the way SeamlessChex recommends. If the answer is vague, that tells you something about your processor, and my post on building a backup payment plan is the next read.
Extend data retention to at least 14 months. Export order data from your store monthly: customer email, shipping and billing address, phone, IP address, device identifier and the AVS and CVV results. Store it somewhere searchable by card and by token if your processor exposes them. Keep the files out of tools that auto-delete.
Screen high-risk orders before shipping. A fraud service such as ClearSale reviews orders before they ship, which is cheaper than winning a dispute afterward. Add a phone call to every order over your own threshold, say $1,500, and log the result in the order notes.
Keep proof of authorization for Mastercard 4807 and 4808 disputes. If the $25 handling fee reported by Merchant Cost Consulting applies to your acquirer, it only comes back when you win with proof of valid authorization. Save the authorization response with each order, and stop automatic retries on declines, since retries are what trigger the fees on Visa’s Response Code 57.
Make your policies part of your evidence. Refund, shipping and return terms need to be published, dated and agreed to at checkout. Shopify now offers automated store policies, but read the output and edit it to match how your business actually operates.
Price in the cost of disputes and keep a second payout path. Track dispute losses and fees as their own line in your books, which a tool like Finaloop handles for ecommerce. Open a second business account so a reserve or hold on one does not freeze your payroll and ad spend.

I walked through the setup for Mercury step by step. For a cross-border account, the Airwallex setup guide covers fees you can avoid.

My comparison of high-risk payment processors helps if your current one gets twitchy. If you want a second set of eyes on your processor setup and dispute process, book a call at my discovery page and bring your last six months of disputes.

One more habit worth adding. Send a post-purchase email through Klaviyo that states the product, the price and the exact name that will appear on the customer’s card statement. It cuts the “I don’t recognize this charge” disputes that never needed to happen. My breakdown of turning Google Shopping clicks into sales covers the customer journey that feeds that email.

Frequently Asked Questions

What exactly changes on Oct. 24?
Per Pulse, Visa Compelling Evidence 3.0 will accept prior undisputed purchases from other merchants, match on the same card or an associated token, and count agentic payment provider login IDs, for disputes processed on or after Oct. 24, 2026.

Do I have to do anything for the new rules to apply to my store?
The rules apply at the network level, but you only benefit if your processor or acquirer submits the evidence. Ask them in writing how and when. My guide to setting up a US store from abroad explains how banking and processor choices stack together for remote owners.

How long should I keep order data?
Pulse estimates that retention shorter than about 13 months discards usable history, given the 365-day lookback and the 30-day pre-arbitration window. I’d keep 14 to 18 months of order, device and delivery data.

Is the Mastercard $25 chargeback fee confirmed?
Only one firm, Merchant Cost Consulting, reported the amount in what I found. It applies to reason codes 4807 and 4808 on non-face-to-face transactions and is refunded on a win with proof of valid authorization. Verify it with your acquirer before you budget for it.

What is the VAMP threshold I should worry about?
Solidgate and SeamlessChex both put the merchant threshold at 1.5%, down from 2.2% on April 1, 2026, with the ratio counting fraud reports plus disputes over settled card-not-present transactions. Ask your acquirer for its own limit, which can be stricter.

Does this help a brand-new store with no repeat buyers?
Not directly, because the evidence path needs two prior undisputed transactions. New stores should lean on delivery proof, phone verification and clear policies, and use the free mini course to get the fundamentals in place first.

Should I add a backup payment processor now?
If more than about 80% of your volume runs through one processor, yes. Rule changes like this one tend to reach merchants as contract amendments months after Visa publishes them, per SeamlessChex, and a second account keeps your store selling while you sort it out.

Want 1-on-1 coaching to fix your high-ticket store’s payments and dispute process? We’ll go through your processor, your evidence trail and your fraud screening together. Get the coaching details →

Visa’s Oct. 24 date is twelve days out, and processors usually move slowly. Send the email today, then fix the data trail. Subscribe to the YouTube channel for daily breakdowns. More breaking news coming through the day.

If this was useful, these go deeper:

Trevor Fenner

Trevor Fenner is an ecommerce entrepreneur and the founder of Ecommerce Paradise, a platform focused on helping entrepreneurs build and scale profitable high-ticket ecommerce and dropshipping businesses. With over a decade of hands-on experience, Trevor specializes in high-ticket dropshipping strategy, niche and product selection, supplier recruiting and onboarding, Google & Bing Shopping ads, ecommerce SEO, and systems-driven automation and scaling. Through Ecommerce Paradise, he provides free education via in-depth guides like How to Start High-Ticket Dropshipping, advanced training through the High-Ticket Dropshipping Masterclass, and fully done-for-you turnkey ecommerce services for entrepreneurs who want a faster, more hands-off path to growth. Trevor is known for emphasizing sustainable, real-world ecommerce models over hype-driven tactics, helping store owners build scalable, sellable, and location-independent brands.