Monitoring measures outcomes, not labels
Card network monitoring programs do not ask whether a merchant is "high risk". They ask whether measurable outcomes, such as reported fraud and disputes, cross defined thresholds over a defined period, and whether the acquirer is controlling them. The label matters less than the numbers and the paper trail behind them.
Visa: the Acquirer Monitoring Program
In April 2025 Visa introduced an evolved Visa Acquirer Monitoring Program (VAMP) that consolidated earlier fraud and dispute programs into one acquirer-focused framework. In broad terms it combines fraud reports and disputes into a ratio against card-not-present transactions, and it also looks at enumeration, the automated testing of card credentials. Thresholds, timing and fees are set in Visa's program documents and have changed during rollout, so read the current edition linked in the source library.
Mastercard: chargeback monitoring, BRAM and MATCH
Mastercard runs its own chargeback and fraud monitoring and publishes security rules that set acquirer responsibilities. Its Business Risk Assessment and Mitigation (BRAM) program addresses merchants processing prohibited or brand-damaging transactions, and MATCH records certain terminations so other acquirers can see them.
Why responsibility flows through the acquirer
Networks contract with acquirers, not merchants. When a merchant breaches a threshold, the network's assessment usually lands on the acquirer, which passes obligations and costs down through its merchant agreement. That is why acquirers ask for remediation plans, adjust reserves or terminate relationships when ratios rise.
What a merchant can actually control
- A billing descriptor customers recognize.
- Clear cancellation and refund paths that resolve complaints before they become disputes.
- Bot and velocity controls on checkout to limit enumeration.
- Fraud screening tuned for the product, not only for approval rates.
- Monthly tracking of the same ratios the acquirer uses, with the same numerator, denominator and timing.
Methodology
Risk and Rails uses public network materials, regulator pages and official provider documentation. Editorial risk labels are explanatory only and are not network classifications. See the source library.
Frequently asked questions
What is Visa VAMP?
The Visa Acquirer Monitoring Program is Visa's framework, revised in April 2025, for monitoring fraud and disputes through acquirers. It consolidated earlier merchant programs and also addresses enumeration. Check the current program document for thresholds.
Do card networks fine merchants directly?
Generally no. Networks assess the acquirer, which then applies fees, reserves or other measures to the merchant under the merchant agreement.
What triggers network monitoring?
Measured outcomes such as fraud and dispute counts or ratios above program thresholds within a reporting period, or evidence of prohibited activity, rather than an informal high-risk label.