Skip to main content

Network Rules

TL;DR

Card networks enforce compliance through monitoring programs (VAMP, ECM), high-risk registration (VIRP, BRAM), and terminated merchant databases (MATCH, VMSS). Acquirers bear primary responsibility for merchant compliance, while issuers face their own monitoring requirements. Non-compliance leads to escalating fines, enhanced scrutiny, and potential network expulsion.

Network Compliance Overview​

Visa and Mastercard function as rule-making bodies for the payment card ecosystem. They establish requirements for how transactions are processed, disputes are handled, and fraud is managed. These rules are published annually (typically with April and October effective dates) and enforced through member banks.

Compliance is enforced primarily through acquirers for merchants and directly for issuers. When violations occur, fines flow through member banks: acquirers pass merchant fines to their merchants, and issuers absorb their own penalties. Serious violations can result in MATCH listing (effectively banning a merchant from processing) or network expulsion for members.

Understanding these programs is essential for anyone operating in the card ecosystem. The consequences of non-compliance range from monthly fines to complete loss of card acceptance privileges.

Key Programs by Network​

Visa Programs​

ProgramPurposePrimary Audience
VAMPConsolidated fraud and dispute monitoringAcquirers, Merchants
VIRPHigh-risk merchant registrationAcquirers
VMSSTerminated merchant databaseAcquirers
Visa Secure3DS liability shift rulesAll parties
VIMPIssuer monitoringIssuers

VAMP (Visa Acquirer Monitoring Program): Consolidated program replacing VDMP and VFMP. Monitors combined fraud (TC40) and dispute (TC15) ratios. Effective April 2025 with enforcement beginning October 2025.

VIRP (Visa Integrity Risk Program): Registration and monitoring for high-risk merchants across three tiers based on risk level. Replaced GBPP in May 2023.

VMSS (Visa Merchant Screening Service): Database of terminated merchants. Acquirers must query before onboarding and add terminated merchants within 1 business day.

Mastercard Programs​

ProgramPurposePrimary Audience
ECPExcessive chargeback monitoring (ECM/HECM)Acquirers, Merchants
EFMExcessive fraud merchant monitoringAcquirers, Merchants
BRAMIllegal/brand-damaging activityAcquirers
MRPHigh-risk merchant registrationAcquirers
MATCHTerminated merchant listAcquirers

ECP (Excessive Chargeback Program): Two-tier program with ECM (Excessive Chargeback Merchant) and HECM (High Excessive Chargeback Merchant) levels based on both count and ratio thresholds.

EFM (Excessive Fraud Merchant): Separate program specifically for fraud monitoring on e-commerce transactions, with 3DS usage requirements.

BRAM (Business Risk Assessment and Mitigation): Protects against illegal or brand-damaging transactions including synthetic drugs, counterfeit goods, unlicensed gambling, and other prohibited activities.

MATCH (Member Alert to Control High-Risk): Mastercard-maintained database of terminated merchants. Entries remain for 5 years and effectively prevent card processing.

Program Comparison​

AreaVisa ProgramMastercard Program
Chargeback/Dispute MonitoringVAMPECP (ECM/HECM)
Fraud MonitoringVAMPEFM
High-Risk RegistrationVIRPBRAM + MRP
Terminated Merchant ListVMSSMATCH
Issuer MonitoringVIMPVarious

Section Contents​

Dispute Monitoring​

Deep dive on Visa VAMP, Mastercard ECM/HECM, and related monitoring programs. Covers thresholds, fee structures, remediation requirements, and prevention tool impact.

Surcharging​

Network limits on credit card surcharges, state law interaction, disclosure requirements, and the difference between surcharges, convenience fees, and cash discounts.

Resources​

Visa Documentation​

  • Visa Core Rules and Visa Product and Service Rules: Annual publication (~1,000+ pages)
  • Visa Business News: Monthly bulletins with rule changes
  • Visa Online: Member portal for compliance resources

Mastercard Documentation​

  • Mastercard Rules: Multiple documents covering different topics
  • Mastercard Connect: Member portal
  • Global Operations Bulletins: Rule change announcements
Stay Current

Network rules change frequently. Subscribe to Visa Business News and Mastercard Global Operations Bulletins, and work with your acquirer or processor to stay informed of changes affecting your business.

Last Verified: December 2024

Network rules change frequently. Thresholds and program details should be verified against current Visa and Mastercard documentation. Check Visa Business News and Mastercard Global Operations Bulletins for updates.

See Also​