Skip to main content

Benchmarks (Operator Field Manual)

On this page
TL;DR
  • Auth rate: CNP 85-90% typical, CP 98-99%; Apple/Google Pay 92-97%
  • Fraud rate: CNP e-commerce 0.05-0.2%, digital goods 0.2-0.5%, travel 0.5-1.5%
  • Chargeback ratio: Under 0.5% healthy, 0.75-0.9% danger, over 0.9% crisis (Visa threshold)
  • Refund rate: 2-5% typical; refund-to-CB ratio should be 3-5:1
  • Segment everything (CP vs. CNP, BIN, geo); trend over 4-8 weeks beats snapshots

Key Fact: Processors flag merchants around 0.9% chargeback ratio (internal threshold). Visa's VAMP Merchant Excessive level is 2.2% (tightening to 1.5% in April 2026) with $8/dispute fines. Mastercard ECM triggers at 1.5% AND 100+ chargebacks with fines up to $25,000/month at months 7-11. Stay under 0.5% to maintain a healthy buffer.

Use anchors, not absolutes. Compare to yourself over time and by segment (CP vs CNP, method, BIN, geo). Your baseline matters more than industry averages.

85-90%
CNP Auth Rate (typical US e-commerce)
98-99%
CP Auth Rate (retail / in-person)
0.05-0.2%
CNP Fraud Rate (e-commerce baseline)
Under 0.9%
Chargeback Ratio Safe Zone

Last verified: Dec 2025. Benchmarks shift with market conditions; recalibrate annually.

What Matters (5 bullets)

  • Segment everything. CP vs CNP, card brand, BIN/issuer, country, device. Aggregate numbers hide problems.
  • Trend beats snapshot. Direction over 4-8 weeks matters more than any single week.
  • Read metrics together. Auth, fraud, chargebacks, refunds, and alerts are interconnected.
  • These ranges assume US domestic, mainstream MCCs. High-risk verticals run hotter.
  • Date your thresholds. "Last verified" on any number you publish or operationalize.

Authorization Rate Benchmarks

Card-Not-Present (CNP)

PerformanceAuth RateNotes
PoorUnder 80%Major issues: fix fraud rules, 3DS, or issuer relations
Below average80-85%Room for improvement
Typical85-90%Standard for US e-commerce
Good90-93%Well-optimized stack
Excellent93-95%Best-in-class; network tokens, retry logic, issuer work

Card-Present (CP)

PerformanceAuth RateNotes
PoorUnder 95%Investigate terminal issues, connectivity
Typical98-99%Expected for retail
Excellent99%+Fully optimized

By Payment Method

MethodTypical Auth RateNotes
Cards (CNP)85-90%Varies heavily by BIN/issuer
Cards (CP)98-99%Chip/PIN highest
Apple Pay/Google Pay92-97%Tokenized, higher than raw cards
PayPal95-98%Account-to-account
ACH99%+But watch returns

By Issuer Geography

RegionTypical Auth RateNotes
US domestic88-93%Baseline
UK/EU85-90%SCA friction may impact
LATAM70-85%Higher decline rates common
APAC75-88%Varies widely by country
Cross-border5-15% lowervs domestic acquiring
Your Auth Rate Below 85%?

That's below typical for US e-commerce. Three things to check first:

  1. Pull your decline codes. Decline code reference shows what each code means and whether you can retry.
  2. Segment CP vs CNP. If you're mixing them, your CNP number is worse than it looks.
  3. Check your 3DS configuration. Over-triggering challenges tanks auth rates. See 3D Secure optimization.

Already above 90%? You're doing well. Focus on fraud rates and chargeback ratios instead.


Key Fact: Typical CNP (online) authorization rates for US e-commerce are 85-90%. Apple Pay and Google Pay tokenized transactions achieve 92-97% because network tokens provide stronger issuer trust signals. If your auth rate is below 85%, check your decline codes, CP/CNP segmentation, and 3DS configuration first.

Fraud Rate Benchmarks

By Transaction Type

TypeTypical Fraud RateAlert Level
CNP e-commerce0.05-0.2%Over 0.3% = tighten rules
CP retail0.01-0.05%Over 0.1% = investigate
Digital goods0.2-0.5%Higher baseline expected
Subscriptions0.1-0.3%Monitor initial vs recurring

By Industry (CNP)

IndustryTypical Fraud RateNotes
General retail0.1-0.2%Baseline
Luxury/high-ticket0.3-0.8%Attractive target
Digital goods0.3-0.6%No physical verification
Travel0.5-1.5%High-risk category
Gaming/gambling0.5-2%+Varies with regulation
Crypto/forex1-3%+Extreme high-risk

Fraud Detection Metrics

MetricGoodConcerning
False positive rateUnder 1%Over 2% hurts conversion
Catch rate (true positive)60-80%Under 50% = rules too weak
Manual review rateUnder 5%Over 10% = automation gaps
Review-to-block rate20-40%Too high = rules too loose
Fraud Rate Above 0.3% (CNP)?

You're above the typical range for e-commerce. Start here:

  1. Identify the fraud type. First-party vs third-party vs ATO require different responses.
  2. Check if you have risk scoring. If not, that's your first investment. See risk scoring.
  3. Under $1M/year? Your processor's built-in fraud tools are probably enough. Don't buy vendor tools yet. See vendor landscape.

Fraud rate under 0.1%? Make sure your false positive rate isn't too high. Blocking good customers costs more than fraud at low rates.


Chargeback Benchmarks

Chargeback Ratio Thresholds

RatioStatusAction
Under 0.5%HealthyMonitor normally
0.5-0.75%CautionIncrease monitoring
0.75-0.9%DangerActive remediation needed
0.9-1.0%CrisisRisk of program enrollment
Over 1.0%Threshold breachVAMP/ECM enrollment likely

Network Program Thresholds

NetworkStandard ThresholdEnhanced Threshold
Visa (VAMP)~0.9% (processor-enforced)2.2% merchant excessive (tightening to 1.5% in 2026) + 1,500 combined fraud reports + disputes
Mastercard (ECM)1.5% AND 100 disputes3.0% AND 300 disputes (HECM)
American ExpressVaries by relationship-
Discover1.0%-

Chargeback Composition

Reason TypeTypical ShareRed Flag
Fraud disputes50-70%-
Friendly fraud (explicitly classified)20-40%Over 50% = evidence problem
"Unrecognized"5-10%Over 20% = descriptor issue
Service/quality10-20%Over 30% = product/CX problem
Recurring billing5-15%Over 25% = cancellation issue

Note: These are reason-code-based categories. True friendly fraud (cardholder made the purchase but disputes) cuts across all categories and may represent 40-70% of total chargebacks for e-commerce merchants.

Chargeback Ratio Above 0.75%?

You're in the danger zone. Here's what to do based on where you are:

Check your chargeback composition first. "Unrecognized" chargebacks above 20% means your billing descriptor is wrong. That's a 10-minute fix that can cut your ratio in half.


Refund Benchmarks

Refund Rate

RateInterpretation
Under 2%May be too restrictive; could increase disputes
2-5%Typical for most merchants
5-10%Higher but may be appropriate for some models
Over 10%Investigate product/CX issues

Refund-to-Chargeback Ratio

RatioInterpretation
Under 2:1Refunding too little; disputes filling the gap
3-5:1Healthy balance
5-10:1Acceptable; strong refund policy
Over 10:1May be over-refunding; investigate

Alert Performance Benchmarks

Ethoca/CDRN/Verifi Metrics

MetricGoodTarget
Alert match rate30-50%As high as possible
Response timeUnder 2 hoursIdeally automated
Refund vs ignore80%+ refundDepends on ticket size
Prevented disputes20-40% reductionTrack before/after

Real-Time Alert Response

Response TimePerformance
Under 1 hourExcellent
1-4 hoursGood
4-24 hoursAcceptable
Over 24 hoursMissing value

By Business Model

Subscriptions

MetricBenchmark
Initial auth rate80-85%
Recurring auth rate90-95%
Involuntary churnUnder 3% monthly
Dunning recovery10-30% of failed
Subscription fraud0.1-0.3%

Digital Goods

MetricBenchmark
Auth rate80-88% (more 3DS step-up)
Fraud rate0.3-0.6% (higher baseline)
Dispute win rate30-50% (harder to prove)

Physical Goods

MetricBenchmark
Auth rate85-92%
Fraud rate0.1-0.2%
Dispute win rate50-70% (delivery proof helps)
"Not received" share20-40% of disputes

B2B

MetricBenchmark
Auth rate90-95%
Fraud rateUnder 0.1%
ACH return rateUnder 1%
Invoice paymentNet-30 to Net-60 typical

Keyed Transaction Benchmarks (CP)

Keyed % of CP VolumeStatus
Under 2%Normal
2-5%Investigate
5-10%Problem
Over 10%Major red flag

High keyed rates may indicate:

  • Terminal issues
  • Card-not-present masquerading as CP
  • Employee fraud
  • Training gaps

Benchmarks by Revenue Tier ($50K-$5M)

Industry averages hide the reality that a $100K/year Etsy seller and a $3M/year DTC brand face completely different numbers. Here's what to expect at your size.

Metric$50K-$250K/yr$250K-$1M/yr$1M-$5M/yr
Auth rate (CNP)82-87%85-90%88-93%
Fraud rate0.1-0.4%0.08-0.25%0.05-0.15%
Chargeback ratio0.3-0.8%0.2-0.6%0.15-0.4%
Refund rate3-8%2-5%2-4%
Processing cost2.7-3.5%2.4-2.9%2.0-2.6%
Manual review rate0% (no tools)2-5%5-10%
Reconciliation methodEyeball bank depositsSpreadsheetSemi-automated

Why smaller merchants have worse numbers:

  • Auth rates are lower because smaller merchants often lack network tokens, retry logic, and issuer relationships
  • Fraud rates are higher per transaction because fraudsters target merchants with weaker controls
  • Chargeback ratios are higher because a single dispute hits harder (10 chargebacks on 2,000 transactions = 0.5%)
  • Processing costs are higher because you have less volume to negotiate with

The volume trap: At low volume, a handful of chargebacks can spike your ratio above network thresholds. A merchant doing 500 transactions/month only needs 5 chargebacks to hit 1.0%. See chargeback thresholds for the exact numbers.


How to Use These Benchmarks

Step 1: Establish Your Baseline

Before comparing to industry, know your own numbers:

  • Calculate each metric for last 90 days
  • Segment by CP/CNP, geography, method
  • Document as your baseline

Step 2: Compare to Benchmarks

  • Are you above/below industry norms?
  • Which segments are problems?
  • Where are quick wins?
  • Weekly: Auth rate, fraud rate, chargeback ratio
  • Monthly: All metrics, segmented
  • Quarterly: Deep dive, re-baseline

Step 4: Set Alerts

MetricAlert When
Auth rateDrops over 0.5pp from baseline
Fraud rateRises over 0.05pp
Chargeback ratioApproaches 0.75%
Refund rateChanges over 1pp

Where This Breaks

  • Mixing CP and CNP. Never combine in single number.
  • Seasonality. Holiday, promo weeks skew baselines. Compare like periods.
  • High-risk MCCs. Travel, gaming, crypto run above these ranges. Set your own bands.
  • International traffic. Expect lower auth, higher fraud. Get local acquiring before judging.
  • Low volume. Small sample sizes create noise. Need 1000+ transactions for reliable rates.

Next Steps

Establishing your baseline?

  1. Follow the 4-step process - Baseline, compare, track, alert
  2. Segment by CP vs CNP - Never combine in one number
  3. Set internal alert thresholds - Catch problems early

Comparing to industry?

  1. Check auth rate benchmarks - CNP 85-90%, CP 98-99%
  2. Review fraud rate by industry - Know your vertical
  3. Understand chargeback thresholds - Under 0.5% healthy

Improving metrics?

  1. Optimize auth rate - Network tokens, retry logic
  2. Reduce fraud rate - Risk scoring, 3DS
  3. Lower chargeback ratio - Alerts, descriptors