Mastercard Excessive Chargeback Program (ECP): 2026 Merchant Guide

TL;DR:

• Mastercard runs two monitoring programs: the Excessive Chargeback Program (ECP) for all dispute types and the Excessive Fraud Merchant (EFM) program for CNP fraud.
• ECM triggers at 100–299 chargebacks AND a 1.5%–2.99% ratio; HECM at ≥300 chargebacks AND ≥3%, both measured over two months.
• Fines escalate from $1,000 up to $200,000+ for HECM, plus an Issuer Recovery Assessment and possible MATCH listing.
• EFM needs all four criteria met: ≥1,000 CNP transactions, ≥$50K fraud chargebacks, ≥50 bps fraud ratio, and low 3DS usage.
• A third program, SMMP (Scam Merchant Monitoring Program), takes full effect July 24, 2026 and can flag merchants for suspected scam activity independent of ECP/EFM ratios.
• Exit requires three consecutive months below threshold; prevention through alerts, 3DS, and automated representment is far cheaper than remediation.

Understanding the Mastercard Chargeback Monitoring Program

Mastercard established the Acquirer Chargeback Monitoring Program (ACMP) under its Global Compliance Programs to track merchants' monthly dispute thresholds based on chargeback count and ratio. The program requires merchants to lower their chargeback rates to stay compliant with Mastercard's chargeback thresholds and avoid penalties. The goal? To preserve the integrity of the payment system.

Mastercard operates two distinct chargeback monitoring programs:

1. Excessive Chargeback Program (ECP)
2. Excessive Fraud Merchant (EFM) program

1) Excessive Chargeback Program (ECP)

Mastercard's Excessive Chargeback Program (ECP) is a regulatory instrument that monitors disputes based on a Merchant Identification Number (MID). Mastercard calculates chargeback threshold using network-wide chargeback data from all transaction types, including card-present and card-not-present sales, to track chargebacks.

ECP Formula

Mastercard determines a merchant's ECP basis point or chargeback rate using the formula below:

• Chargeback Rate: The number of chargebacks received in the current month divided by the total transactions processed in the previous month, multiplied by 100.

1. Example: 150 first presentment chargebacks in July ÷ 7,500 transactions in June x 100 = 2% Chargeback Rate.

• Chargeback Basis Point: First presentment chargebacks in a calendar month divided by the number of Mastercard transactions processed in the preceding month, multiplied by 10,000.

1. Example: 150 first presentment chargebacks in July ÷ 7,500 transactions in June x 10,000 = 200 Basis Points.

Mastercard has established two levels of excessive chargeback severity based on the above formula.

a) Excessive Chargeback Merchant (ECM)

Excessive chargeback merchant flags merchants with 100-299 chargebacks and a chargeback-to-transaction ratio of 1.5%-2.99% (150-299 basis points). Mastercard applies the ECM designation to merchants who have exceeded the stated threshold for two months. However, a single month above the ECM threshold may lead to initial flagging or monitoring. But no official status or fine is applied.

Notable ECM Numbers:

• ≥100 chargebacks per month (i.e., 100+ basis points)
• Chargeback-to-transaction ratio ≥1.5%
• Non-performance assessment starts over 2 consecutive or non-consecutive months

Program Duration: Minimum of 3 months to exit after exceeding ECM threshold.

b) High Excessive Chargeback Merchant (HECM)

A merchant is flagged as HECM after exceeding 300 chargeback issuances and 3% chargeback ratio. Acquirers are responsible for notifying merchants of their status and coordinating remediation. Reaching the HECM level is a more serious situation.

Notable HECM Numbers:

• ≥ 300 chargebacks per month (i.e., 300+ basis points)
• Chargeback-to-transaction ratio ≥3%
• You must exceed both concurrently to be flagged
• Non-performance assessment starts over 2 (consecutive or non-consecutive) months

Program Duration: Minimum of 3 consecutive months below threshold required to exit HECM status, the same exit standard that applies to ECM. Only the pace of fine escalation differs between the two tiers.

Mastercard Excessive Chargeback Program Enrollment Consequences

Breaching the ECP threshold attracts significant financial and non-financial consequences, such as:

• Fees: $1,000 to $200,000 monthly fines.
• MID Flagging: Merchant ID marked for heightened scrutiny and reporting requirements.
• Acquirer Termination Risk: Banks often terminate excessive merchants.
• MATCH Listing Probability: High likelihood of industry-wide processing ban for high excessive merchants.

Mastercard Excessive Chargeback Program Extension Requests

Merchants facing ECM or HECM designation can request a 6-month extension from Mastercard to suspend fine collection. ECP extension halts immediate fine payments for up to 6 months. It provides breathing room to implement chargeback reduction strategies. It also allows merchants to continue processing transactions during improvement efforts.

Excessive Chargeback Merchant Program Remediation and Exit Strategy

Mastercard requires a comprehensive remediation plan from merchants that enter the chargeback monitoring programs. This document serves two vital purposes:

1. Demonstrating your compliance commitment
2. Determining how fines will be calculated
   Below are the vital components of a Mastercard chargeback monitoring program remediation action plan:

• Business Overview: Clear explanation of your merchant operations and transaction profile.
• Root Cause Analysis: Detailed breakdown of factors driving your elevated chargeback rates.
• Improvement Timeline: Specific actions implemented with exact deployment dates.
• Technology Stack: Complete inventory of active fraud prevention and risk management tools for combating chargebacks.

Pro Tip Remediation Success: Strong remediation plans, such as installing chargeback alerts and dispute analytics, don't just help with compliance. They can influence Mastercard's fine assessment decisions and demonstrate a serious commitment to long-term chargeback reduction.

2) Excessive Fraud Merchant (EFM) Program

Mastercard's Excessive Fraud Merchant program is a specialized compliance initiative for card-not-present (CNP) transactions. Unlike broader chargeback monitoring, EFM monitors fraud-related chargebacks from eCommerce transactions at the merchant ID level to maintain Mastercard network integrity.

EFM Formula: Fraud Chargeback Basis Point

Mastercard calculates your fraud exposure by comparing your monthly transaction volume in a particular month against CNP fraud chargebacks (disputes filed under Reason Code 4837: No Cardholder Authorization) in the preceding month. Only these specific fraud-related disputes count toward EFM thresholds. That is, fraud-related chargebacks/Number of Mastercard eCommerce transactions for the merchant in the preceding month x 10,000. ‍

1. Example: 25 July fraud claims ÷ 1,200 June sales count x 10,000 = 208 Fraud Chargeback Basis Point.

EFM Threshold Criteria

Regarding Excessive Fraud Merchant threshold, Mastercard says a merchant triggers EFM classification if they meet or exceed all four of the following criteria:

1. Number of eCommerce Transactions: At least 1,000 eCommerce transactions from the previous month in clearing.
2. Fraud Chargeback Amount: 50,000 U.S. dollars or higher in fraud-related chargebacks.
3. Fraud Chargeback Basis Points: At least 50 basis points in fraud-related chargebacks (or 0.5% fraud chargeback count to sales count ratio).
4. EMV 3-D Secure (3DS) Utilization: Merchant is located in a non-regulated country and the percentage of the merchant's clearing volume processed using 3DS is 10% or lower; or
   1. The merchant is located in a regulated country and the percentage of the merchant's clearing volume processed using 3DS is 50% or lower.

Excessive Fraud Merchant Consequences

Mastercard applies a non-performance assessment when they've identified a merchant as an EFM for two months, which can be consecutive or non-consecutive. Below are the eligible fine assessments.

• Fines:
  1. Month 1: 0
  2. Month 2: 500
  3. Month 3: 1,000
  4. Month 4-6: 5,000/month
  5. Month 7-11: 25,000/month
  6. Month 12-18: 50,000/month
  7. Month 19+: 100,000/month
• Operational and Reputational Risk: EFM listing attracts increased scrutiny and restrictions from your acquirer as they also face financial penalties for failing to report or manage EFM issues.
• MATCH (Mastercard Alert to Control High-risk Merchants) Listing Risk: High probability of Terminated Merchant File placement.

EFM Extension Requests

Mastercard provides an option for acquirers to file a six-month extension option on behalf of their merchants, which suspends fine collection upon approval. Throughout this grace period, merchants remain subject to EFM program monitoring, with penalties continuing to accumulate monthly for threshold violations. The accumulated fines remain suspended until the extension is completed.

Excessive Fraud Merchant Program Remediation and Exit Strategy

Mastercard requires merchants designated under the Excessive Fraud Merchant Program to submit a comprehensive remediation action plan. This strategic document shows your commitment to fraud reduction and could influence penalty assessments during the review process.

Below are the vital components of a Mastercard excessive fraud merchant program remediation action plan:

• Merchant Profile: Complete operational overview and transaction characteristics.
• Fraud Analysis: Detailed examination of factors contributing to elevated fraud rates.
• Mitigation Action Plan: A Comprehensive list of implemented fraud prevention measures with specific deployment timelines.
• Technology Infrastructure: A full inventory of active fraud detection and prevention systems.

Exiting EFM requires sustained compliance performance over three months. Merchants must maintain a fraud metric below program thresholds for three consecutive months before Mastercard can grant formal exit.

Excessive Chargeback Program vs Excessive Fraud Merchant

Mastercard's designed both ECP and EFM to maintain network integrity by monitoring and penalizing merchants with high-risk activity. EFM specifically targets fraud in eCommerce environments, while ECP addresses overall chargeback volumes across all transaction types.

Proactive Strategies to Avoid ECP and EFM Enrollment

The financial and operational risks outlined above underscore a critical reality: prevention significantly outweighs remediation when managing Mastercard's monitoring programs. Rather than navigating costly penalties and compliance requirements, you should prioritize threshold avoidance and broader chargeback mitigation.

ECP Enrollment Prevention Framework

1. Analyze chargeback data (including reason codes) to uncover attack vectors. Leverage a third party solution, such as Chargeflow, to help address disputes before they turn into chargebacks.
2. Establish a strict authorization strategy, such as velocity monitoring and strong Customer Authentication (SCA) ( Mastercard SecureCode or Mastercard Identity Check).
3. Implement an efficient risk detection tool with real-time monitoring and reporting functionalities.
4. Review the billing descriptor and consider adding a customer service phone number.
5. If the billing model is a subscription service, increase the frequency by which cardholders are notified of billing or change how you notify cardholders. Make it easy for cardholders to opt-out, downgrade, or cancel.

EFM Enrollment Prevention Framework

1. Implement an internal ecommerce fraud prevention tool or leverage a third-party solution that incorporates advanced detection capabilities.
2. Establish a strict authentication strategy, such as using 3DS/Mastercard Identity Check Program, to allow issuers or Mastercard to perform cardholder authentication.
3. Monitor and block suspicious merchant account login attempts to prevent fraudulent access to cardholder user accounts.
4. Analyze chargeback data and fraudulent transaction cancellations to identify fraud attack loopholes.
5. Educate yourself on the latest fraud prevention tools and fraud trends.

Leveraging Advanced Technology for Chargeback Fraud Prevention: A Case Study of Elementor

Elementor, a leading web development platform, recently faced significant challenges in chargeback management. The company's billing team spent 20-30 minutes on each chargeback, manually gathering evidence and uploading through Stripe or PayPal, creating delays and backlogs.

After attempting to build native software to fix the issue, which didn't yield the intended result, the team integrated Chargeflow's automated platform. Chargeflow instantly streamlined evidence collection, submissions, and signal collection with a plug-and-play process, which takes only minutes to implement, compared to weeks or months with other providers.

Result:

Frequently Asked Questions

What does ECP stand for, and what is Mastercard's Excessive Chargeback Program?

ECP stands for Excessive Chargeback Program, Mastercard's system for monitoring chargeback volume and ratio at the merchant ID level across all transaction types. It has two enforcement tiers: Excessive Chargeback Merchant (ECM), triggered at 100-299 chargebacks and a 1.5%-2.99% ratio, and High Excessive Chargeback Merchant (HECM), triggered at 300 or more chargebacks and a 3% or higher ratio, both measured over two months.