Visa VAMP explained: key changes and their impact on merchants and payment businesses

Share this post:

Visa VAMP explained: key changes and their impact on merchants and payment businesses

Share this post:

In 2025, Visa launched the Visa Acquirer Monitoring Program (VAMP) – a unified global framework to tackle fraud, chargebacks, and enumeration attacks.

VAMP reshapes how performance is measured across the payments ecosystem. It directly impacts costs, compliance risk, and even acquirers' ability to maintain banking relationships.

Here’s what changed, why it matters, and how to stay compliant.

What is Visa VAMP?

💡
Visa's Acquirer Monitoring Program (VAMP) is a global framework introduced in 2025 to help reduce fraud and disputes in card payments. It replaces 38 separate remediation processes with one streamlined global standard, effective from April 1, 2025.

Its goal is clear: make acquirers accountable for managing fraud and dispute levels in their portfolios. Merchants, PSPs, and processors all contribute to these metrics.

How does VAMP work?

A cornerstone of VAMP is its unified risk metric, the VAMP ratio, which combines fraud and dispute counts. This is a shift from prior programs that tracked fraud and chargebacks separately.

The VAMP ratio is calculated as:

VAMP ratio calculation

Under VAMP, Visa reviews each acquirer's performance monthly. Those that cross certain thresholds are placed into one of two categories:

  • Above Standard (0.5%): indicates an upward trend in fraud or disputes relative to market norms. Acquirers must promptly investigate underlying causes and implement corrective measures to restore compliance.
  • Excessive (0.7%): reflects persistently high fraud or dispute levels. Visa responds with intensive oversight, including direct reviews of high-risk merchants and the imposition of financial penalties and other enforcement actions.

Merchants are not directly enrolled in VAMP, but because their fraud and dispute activity is aggregated into their acquirer’s portfolio, it can push the acquirer over Visa’s thresholds, making the acquirer liable for fines and driving them to pressure, penalise, or even terminate high-risk merchants.

For merchants, being flagged as Excessive means crossing a 1.5% threshold.

coin
Ready to start your success story?
See our platform in action, share your challenges, and find a solution you’ve been looking for.
Get started

Latest changes in Visa VAMP

Visa introduced VAMP in early 2025 with a phased rollout to give acquirers and merchants time to adjust. For the first six months, the program operated in an advisory mode. As of October 1, 2025, Visa transitioned VAMP into full enforcement.

Here’s a look at the changes already live and the ones you should prepare for.

Date Before After
April 1, 2025 Multiple legacy programs; fraud/disputes tracked separately Launch of VAMP, single ratio, enumeration monitoring introduced
April–September 2025 Advisory only; no financial penalties Acquirers received warnings and “shadow” compliance reports
June 1, 2025 Lower volume thresholds (1000 incidents) and older ratio levels (~0.3%) Thresholds raised: 1500+ incidents required; Above Standard ≥0.5%, Excessive ≥0.7%
October 1, 2025 Advisory phase, no fines Enforcement begins for “Excessive” acquirers/merchants; $10 per incident
January 1, 2026 No fees for Above Standard status Enforcement begins for “Above Standard” acquirers; $5 per incident
April 1, 2026 Excessive Merchant threshold = 2.2% in most regions Threshold tightened globally to 1.5%

From October 1, 2025, Visa began enforcing penalties under VAMP. This marks the first time financial consequences are systematically applied across the network – a significant shift toward active risk governance.

Fines are calculated per incident:

  • $5 for each card-not-present fraud or dispute logged by acquirers in the "Above Standard" category
  • $10 for each incident involving acquirers flagged as "Excessive" or those with an "Excessive Merchant" in their portfolio

VAMP impact on acquirers, merchants, and processors

Visa’s Acquirer Monitoring Program reshapes responsibility across the payments ecosystem. Each stakeholder group is affected in distinct ways.

For acquirers

Acquirers now bear full responsibility for the fraud and dispute performance of their portfolios. With monthly monitoring based on the VAMP ratio, any breach of thresholds triggers mandatory investigation, remediation, and formal reporting within tight deadlines.

  • Operational pressure: Acquirers must improve merchant oversight, enhance fraud controls, and implement proactive remediation protocols.
  • Financial exposure: Fines of $5–$10 per incident accumulate rapidly in high-volume environments.
  • Strategic risk: Repeated breaches can lead to reputational damage or network restrictions, including limits on onboarding new merchants.

Despite the pressure, consistent low ratios bring clear rewards: stronger issuer trust, reduced losses, and potentially better treatment within the network.

For merchants

Visa places liability on acquirers, but the effects cascade to merchants. Acquirers may introduce stricter requirements, increase costs, or exit high-risk relationships.

  • Stricter oversight: Merchants in verticals like iGaming, forex, travel, and subscriptions face heightened compliance demands.
  • Rising expectations: Acquirers increasingly require adoption of advanced tools like 3D Secure, AVS, machine learning risk engines, and dispute resolution platforms.
  • Indirect consequences: Merchants with ratios above Visa’s 1.5% threshold often face higher reserves, tighter processing limits, or terminated contracts. Merchants with low chargeback rates, however, may benefit from better approval rates and looser reserve terms.

For processors and PSPs

Sitting between acquirers and merchants, processors and payment facilitators must take ownership of overall performance.

  • Portfolio risk management: PSPs must actively track fraud and dispute ratios across their sub-merchants, with real-time dashboards and alerts before the 0.5% and 0.7% thresholds are crossed.
  • Technical defences: they are expected to deploy anti-enumeration tools (e.g., bot detection, velocity checks) on behalf of merchants.
  • Compliance support: many processors now provide remediation playbooks, APIs for fraud/dispute data, and training resources to help merchants stay within thresholds.

How Corefy can help

With VAMP enforcement now live, proactive monitoring and rapid response are the only safe strategy. Corefy's chargeback management service is designed with this in mind, helping businesses keep ratios under control and avoid costly penalties.

qoute
The difference between breaching VAMP and staying compliant often comes down to early dispute interception. That’s exactly where Corefy gives you leverage.
Alexandra Potapska
Alexandra Potapska
Head of Client Service at Corefy

The system facilitates immediate communication between merchants and card issuers, providing clear transaction details that reduce the chances of disputes escalating. Disputes intercepted and resolved at this stage don't count toward the VAMP ratio, which makes proactive management one of the most effective compliance levers.

The result is not just reduced financial exposure, but a stronger compliance posture that supports healthier banking relationships and higher approval rates.

rocket
Take control of your VAMP compliance
Book a demo and learn how Corefy can help you handle disputes and chargebacks efficiently.
Get started

Share this post: