The chargeback number that ends a peptide store’s merchant account is usually lower than the one Visa or Mastercard publish. Your acquirer has its own portfolio to protect, and Mastercard’s MATCH list can be triggered at 1%, well below the headline monitoring thresholds.
So chargeback prevention isn’t something you start when the processor emails. Disputes are a weekly number to manage, with a few tools that genuinely move it and one popular “fix” that gets merchants listed for five years.
Here’s where disputes come from in this category, what the networks count as of 2026, which alert tools are worth paying for, and how to build evidence before you need it.
Where peptide chargebacks come from
Most disputes we see in this category aren’t customers trying to steal. They come from a handful of predictable gaps:
- Descriptor confusion. The statement shows a name the customer doesn’t recognise, so they dispute it as unauthorised.
- Slow or opaque shipping. No tracking update for five days and the customer goes to the bank instead of your inbox.
- Customs holds and seizures. International parcels that stall or disappear become “item not received” disputes.
- Friendly fraud. The cardholder ordered, then disputed, sometimes after someone else in the household saw the statement.
- “Not as described.” Missing COAs, or a COA that doesn’t match the batch on the vial, give the customer a story the bank will listen to.
- Real fraud. Stolen cards used for test orders, usually small and in bursts.
- Refund friction. If refunds are slow or hard to request, the bank becomes your refund desk.
Every item on that list is something you can change. That’s the good news.
The card-brand monitoring thresholds in 2026
At the time of writing (late 2026), these are the numbers that matter.
| Program | What’s counted | Merchant threshold | Consequence |
|---|---|---|---|
| Visa VAMP | (Fraud reports TC40 + disputes TC15) ÷ settled transactions | 1.5% or more, at 1,500 or more fraud reports plus disputes a month (US, Canada, EU, AP; lowered from 2.2% on 1 April 2026) | $8 per dispute or fraud report while rated Excessive |
| Mastercard ECP, Excessive | First chargebacks this month ÷ last month’s Mastercard sales | 100 to 299 chargebacks and 1.5 to 2.99% | $1,000 in months 2 and 3, rising to $100,000 a month from month 19 |
| Mastercard ECP, High Excessive | Same | 300 or more chargebacks and 3% or more | Up to $200,000 a month |
| Mastercard MATCH code 04 | Chargebacks vs monthly Mastercard sales transactions | More than 1%, with at least $5,000 involved in the same month | Listing on MATCH for five years |
| Visa VMSS code 22 | Disputes | 1,000 disputes and 1.8% | Listing for five years |
Two details are easy to miss. First, Visa’s VAMP ratio counts fraud reports as well as disputes, so a fraudulent order that never became a chargeback can still count against you. Second, Mastercard’s program needs both the count and the ratio to be exceeded, and its ratio uses last month’s sales as the denominator. A sudden drop in orders makes the ratio jump even if disputes stay flat.
Mastercard also adds an issuer recovery of $5 per chargeback above 300 from month four. In other regions Visa’s numbers differ: 1.5% in Latin America, and 2.2% in CEMEA at 150 or more fraud reports plus disputes and $75,000.
The chargeback ratio that actually matters for a high risk store
Most peptide stores will never see 1,500 Visa disputes or 100 Mastercard chargebacks in a month. That doesn’t make them safe.
Visa also measures acquirers across their whole portfolio: “Above Standard” at 0.5% and “Excessive” at 0.7%, and from 1 January 2026 an acquirer rated Above Standard pays $4 per dispute. A bank managing its portfolio to those numbers has every reason to act on a single merchant long before that merchant reaches 1.5%. Many high-risk agreements also set their own ratio limit, so check yours.
Then there’s MATCH. Code 04 kicks in above 1% of monthly Mastercard sales transactions with at least $5,000 involved. A listing stays active for five years and most acquirers won’t touch a listed merchant.
A typical case: a store doing 800 orders a month at $150 average gets 9 disputes in a bad month. That’s about 1.1%. It’s nowhere near the published monitoring thresholds, but the acquirer’s risk team will notice, and it’s one bad shipping month away from a reserve increase. We tell merchants to treat anything approaching 1% as urgent and to aim well below it.
Chargeback prevention tools: alerts and pre-dispute services
These tools sit between the customer’s complaint and the formal chargeback. They’re the most effective lever you have.
- Verifi Order Insight (Visa) shares order details with the issuer so the cardholder sees what they bought. Verifi says it “provides the customer with enhanced transaction detail thereby reducing billing confusion and avoiding disputes.” It’s aimed squarely at descriptor confusion.
- Verifi Rapid Dispute Resolution (RDR) “can resolve Visa disputes in real time” by refunding automatically under rules you set (for example, refund anything under a set amount). Disputes resolved through RDR are excluded from the VAMP ratio.
- Ethoca Alerts (Mastercard) notify you of a dispute or fraud report so you can refund before it becomes a chargeback. One chargeback specialist notes Ethoca alerts don’t carry RDR’s automatic VAMP exclusion, so check with your processor how alert refunds are counted.
- Compelling Evidence 3.0 (Visa) applies to fraud disputes under reason code 10.4. If you can show two earlier undisputed transactions on the same card, 120 to 365 days old, that match on at least two of device ID, IP address, shipping address and user ID, you can win the dispute. Fraud reports that qualify for CE 3.0 are also excluded from the VAMP ratio.
Are alerts worth paying for? In our experience, yes, for almost every peptide store. Refunding through an alert costs you the sale, but a chargeback costs the sale, a fee and ratio headroom you can’t buy back. For CE 3.0 to work, you need to capture device ID, IP and account ID on every order now, because the evidence comes from orders months old.
Set up your descriptor so customers recognise the charge
Stripe’s statement descriptor rules are a good baseline even if you’re not on Stripe: 5 to 22 Latin characters, it must “reflect your Doing Business As (DBA) name”, and it must contain more than a single common term or common website URL. A dynamic suffix can carry an order number. In Stripe’s words, “Using clear and accurate statement descriptors can reduce chargebacks and disputes.”
In practice:
- Use the brand name customers saw on your site, not your holding company’s name.
- Add a phone number or domain in the descriptor fields if your processor allows it.
- Say “This charge will appear as X” at checkout and in the order confirmation email.
- Keep the descriptor consistent with your DBA everywhere. Visa requires acquirers to keep merchant names uniform, and a vague or unrelated descriptor chosen to obscure what you sell causes disputes and looks like misrepresentation.
Build evidence packs before you need them
You usually get a fixed number of days to respond to a chargeback, set by your processor. That’s not enough time to reconstruct an order. Store this for every order from day one:
- Order record with timestamp, IP address, device ID and customer account ID
- AVS and CVV results, and 3-D Secure authentication where used
- Proof the customer accepted your terms at checkout, including your research-use terms
- Tracking with delivery confirmation (signature on higher-value orders)
- All customer emails and chat transcripts
- Your refund and shipping policy as it read on the order date
- The product page as it appeared at purchase, and the COA for the batch shipped
- The customer’s earlier order history with you
One warning. Your evidence is read by people at the bank. If your product pages, emails or support replies talk about human use, you haven’t won a dispute, you’ve handed the bank a different problem. That’s one more reason the whole business has to genuinely operate as research-use-only.
For “item not received” disputes on international orders, a clear international shipping policy at checkout helps, and it’s worth asking whether you should ship to destinations where parcels are routinely held.
Where backup merchant accounts fit
A second merchant account protects you from outages and terminations. It does not fix a chargeback ratio, and using it to dilute one is how merchants end up on MATCH.
Splitting volume across accounts to stay under monitoring thresholds is exactly what regulators have pursued. In FTC v. CardFlex, the complaint described roughly 300 merchant accounts under 30 corporate names, rotated to stay under thresholds. In a later case, the FTC alleged a Latvian processor used shell companies and load balancing to “evade credit card chargeback monitoring programs”, which settled with a $3.5M judgment. On the network side, that behaviour fits MATCH code 03 (laundering) or Visa VMSS code 23. If you run more than one account, every acquirer should know about the others and your disputes should be reported as they are.
What we’d do this month
- Pull your dispute and fraud-report counts by card brand for the last six months, and calculate both the Visa and Mastercard ratios yourself.
- Turn on Order Insight and RDR for Visa and Ethoca for Mastercard through your processor.
- Fix the descriptor and add the “appears as” line to checkout and confirmation emails.
- Start logging device ID, IP and account ID on every order for CE 3.0.
- Set up the evidence pack as a template so any dispute can be answered in under an hour.
- Tighten the two biggest dispute causes you found in step 1, usually shipping updates or refund access.
For more on choosing a processor that includes these tools, see how to pick the best high risk payment processors, and for the account itself, how a high risk merchant account works for peptide stores. If you’d like us to set up the alerts, descriptor and evidence workflow with your processor, that’s part of our peptide payment processing setup.
Frequently asked questions
What’s a safe chargeback ratio for a high risk peptide store?
There’s no official safe number, but the practical ceiling is well below the published 1.5% monitoring thresholds. MATCH code 04 starts above 1% of monthly Mastercard sales transactions with at least $5,000 involved, and Visa’s portfolio thresholds for acquirers sit at 0.5% and 0.7%. We’d aim well under 1% and treat anything approaching it as urgent.
Do refunded disputes count toward the Visa VAMP ratio?
Disputes resolved through Visa’s pre-dispute tools, such as RDR, are excluded from the VAMP ratio, and so are fraud reports that qualify under Compelling Evidence 3.0. Refunds made after an Ethoca alert may not get the same automatic exclusion, so ask your processor how they’re counted.
Are chargeback alerts worth paying for?
For most peptide stores, yes. An alert lets you refund before a chargeback is filed, which costs you the sale but protects your ratio and avoids chargeback fees. RDR is especially useful because resolved disputes don’t count toward Visa’s monitoring ratio.
Can customs seizures cause chargebacks?
Yes. A parcel held or seized at customs usually turns into an “item not received” dispute. A clear international shipping policy at checkout, good tracking and a decision about which destinations you ship to all reduce the risk.

