Visa VAMP Update: How the Acquirer Monitoring Program Affects High-Risk Merchants

Visa's Acquirer Monitoring Program (VAMP) is shaking up the payments space, and for high-risk merchants the stakes have never been higher. VAMP replaced Visa's two legacy oversight programs — the Visa Dispute Monitoring Program (VDMP) and the Visa Fraud Monitoring Program (VFMP) — on April 1, 2025, folding fraud, chargeback and suspicious-activity monitoring into a single framework. It has tightened since. As of April 1, 2026, the merchant VAMP ratio threshold dropped from 2.2% to 1.5% in the US, Canada, the EU, Asia-Pacific and Latin America — so a ratio that kept you compliant last year may not clear the bar today.

What Is the Visa Acquirer Monitoring Program (VAMP)?

VAMP is Visa's consolidated program for monitoring fraud, disputes, and enumeration activity across acquiring banks and their merchants. Instead of tracking chargebacks and fraud separately, Visa evaluates businesses with a single VAMP ratio: reported fraud (TC40) plus disputes (TC15), divided by settled transactions (TC05). Only card-not-present activity counts. Transactions that count toward VAMP rates include:

• VisaNet card-not-present transactions
• Domestic transactions
• Cross-border transactions
• Code 10 fraud disputes
• Non-fraud dispute codes 11, 12, and 13

Acquiring banks face steep fines and penalties when their merchants generate too many fraud alerts or exceed Visa's ratio thresholds — and that pressure flows directly downhill to merchants in the form of closures, holds, and pass-through fees.

VAMP Thresholds and Fees at a Glance

• Merchant VAMP ratio of 1.5% or higher (as of April 1, 2026): the merchant is treated as excessive and assessed roughly $8 per fraudulent or disputed transaction. The threshold was 2.2% before April 2026, and it remains 2.2% in the CEMEA region.
• A monthly floor of 1,500 applies: VAMP does not bite below it, which is why smaller merchants fall outside the program. Published summaries describe that floor differently — combined fraud and dispute events, or applicable transactions — so confirm with your acquirer which count is being applied to your account.
• Acquirer above-standard band of 0.5%–0.7%: the acquiring bank is charged about $4 per dispute above the threshold. Enforcement of this band began January 1, 2026.
• Acquirer excessive band above 0.7%: the acquiring bank is charged about $8 per dispute.
• Enumeration ratio of 20% or more (with over 300,000 enumeration transactions): enrollment in VAMP plus penalties.

The 0.5% and 0.7% bands are assessed against the acquiring bank rather than you, but those costs are almost always passed down. That split also explains a pattern high-risk merchants run into constantly: an acquirer trying to hold its whole portfolio under 0.7% will enforce a stricter internal limit on your account than Visa's own 1.5%, and that internal number is the one that actually governs whether you keep processing.

How the VAMP Ratio Is Calculated

• VAMP ratio = (reported fraud (TC40) + disputes (TC15)) ÷ settled transactions (TC05), card-not-present only
• Enumeration ratio = enumerated transactions ÷ total transactions

Enumeration transactions are small card-testing charges — often a dollar or less — that criminals run to find valid card details before making larger fraudulent purchases. Visa holds merchants responsible when their payment systems are used for enumeration, which is why card-testing defenses now matter as much as chargeback defenses.

Why VAMP Is Bad News for High-Risk Merchants

Merchants in high-risk industries — subscription services, nutraceuticals, travel, credit repair, and similar verticals — are already flagged for higher levels of fraud, disputes, and regulatory scrutiny. Even legitimate high-risk businesses can drift toward VAMP thresholds because of:

• Limited fraud prevention tools compared to mainstream retailers
• Repeat or recurring transactions that customers sometimes forget and later dispute
• Data collection challenges, where gaps in customer information make it harder to authenticate buyers

When these issues pile up, the result is often account closures, funding holds, or heavy fines from acquiring banks eager to avoid Visa's penalties.

What Happened to VDMP and VFMP?

VDMP focused on merchants with excessive chargebacks; VFMP tracked fraud-to-sales ratios using TC40 data (the fraud reports issuers submit to Visa). Both programs were retired and folded into VAMP on April 1, 2025. If your business was previously monitored under either program, your exposure is now measured by the combined VAMP ratio instead of the old indicators.

CE 3.0: The Key to Suppressing TC40 Fraud Alerts

Compelling Evidence 3.0 (CE 3.0) is Visa's framework for resolving disputes and identifying legitimate transactions — and it is the only method to suppress TC40 fraud alerts. Launched in 2023, CE 3.0 lets merchants present consistent data from at least two previous transactions made by the same customer with the same payment credentials (such as device ID, IP address, or account login). If that evidence matches the disputed transaction, Visa allows the merchant to deflect the chargeback before it escalates. Two 2026 changes widen it: from April 18, 2026 qualification extends to non-disputed fraud — undisputed TC40s — and from October 24, 2026 Visa allows qualifying transactions from more than one merchant to be used as evidence on dispute condition 10.4.

For high-risk merchants this is critical: without CE 3.0 in place, TC40 alerts can snowball quickly, trip VAMP thresholds, and ultimately end in merchant account termination.

How to Keep Your VAMP Ratio Under Control

• 1. Deploy fraud tools that meet CE 3.0 requirements. Prevention is the only way to keep TC40 alerts from accumulating in the first place.
• 2. Collect the right customer data. Device IDs, IP addresses, and account logins are the evidence CE 3.0 runs on — close the data gaps that make authentication harder.
• 3. Manage disputes proactively. Pair CE 3.0 with a broader chargeback management strategy so disputes are deflected before they count against your ratio.
• 4. Watch for enumeration. Block card-testing patterns early; Visa counts enumeration activity against merchants, not just fraudsters.

How PayKings Helps Merchants Stay Compliant

Visa's changes are designed to push merchants and acquiring banks toward stronger fraud prevention. PayKings sets merchants up with compliant fraud tooling and provides reliable high-risk merchant accounts with top-notch acquiring banks. Our team helps businesses:

• Get set up with fraud tools that meet Visa's CE 3.0 requirements
• Keep their merchant accounts compliant under VAMP
• Implement data collection and dispute management strategies that reduce risk

PayKings is here to help you protect your business, stay compliant, and secure the payment processing you need to grow. Apply for a high-risk merchant account that won't collapse at the first sign of trouble.