Skip to main content

Mastercard 4871 - Chip/PIN Lost/Stolen/NRI Fraud

TL;DR
  • A lost, stolen or never-received chip card was used fraudulently, usually where PIN should have stopped it
  • Confirm the filing condition and regional clock. Your response date is on the notice
  • Check PIN and cardholder-verification records against the actual claim. A transaction amount alone doesn't guarantee a defense
  • If your terminal allowed a PIN bypass that wasn't permitted, you own the loss

Got this code?​

Your deadline: The date on your notice wins. Ask your processor if it isn't clear: the network's issuer filing window isn't your response deadline.

The claim: A lost, stolen or never-received chip card was used, usually where a PIN should have stopped it.

Records that answer it:

  1. PIN verification in the authorization response
  2. The transaction amount against the PIN threshold that applied
  3. The transaction time against the loss report

If you can't support it: If your terminal allowed a PIN bypass that wasn't permitted, you own the loss.

Next: Decide whether it's worth fighting, then fill in the response outline for this claim and follow the Representment Workflow.

When This Code Applies​

  • Card was lost and used before reported
  • Card was stolen and used fraudulently
  • Card never received by cardholder (intercepted)
  • PIN should have been required but wasn't
  • PIN bypass occurred when not permitted

Liability Shift Scenarios​

Liability Shifts TO Merchant When:​

ScenarioWhy
Chip + signature (when PIN required)PIN not collected
Chip + no CVMCardholder verification missing
PIN bypass for high-valueExceeded no-PIN limit
Non-chip terminalEMV not supported

Liability Stays WITH Issuer When:​

ScenarioWhy
Chip + PIN verifiedCorrect authentication
PIN verified onlineIssuer approved PIN
Low-value contactlessWithin no-PIN threshold
Card not blocked timelyIssuer delay

PIN Requirements by Transaction Type​

TransactionPIN Required
Chip debitYes (above threshold)
Chip creditVaries by region
Contactless under limitNo
Contactless over limitYes
ATMAlways

Regional PIN Thresholds​

RegionContactless No-PIN Limit
USConfirm your processor, terminal and card's current CVM conditions
EuropeConfirm country, issuer and cumulative conditions
UKConfirm the current issuer and terminal conditions
CanadaConfirm the current issuer and terminal conditions
AustraliaConfirm the current issuer and terminal conditions

A contactless transaction limit isn't a promise that no verification will be requested, or that liability stays with the issuer. Ask which CVM rule applies to this payment.

Time Frames​

RegionChargeback Window
StandardConfirm the lost/stolen condition and start event
Europe ATM/MaestroConfirm the product and regional rule

Use the response date on your notice. The network's issuer filing window isn't your merchant response deadline. Ask your acquirer for the current condition, regional rule and edition before relying on a filing-window summary.

Representment Options​

Valid Defenses​

  1. PIN was verified - Online PIN verification
  2. Below PIN threshold - Transaction didn't require PIN
  3. Proper CVM performed - Signature where permitted
  4. Card not reported lost/stolen - At time of transaction
  5. Refund already issued - Transaction credited

Evidence Required​

DefenseDocumentation
PIN verifiedPIN verification in auth response
Below thresholdTransaction amount vs. limit
Signature obtainedSigned receipt
Not reportedTimestamp vs. loss report

Message Text Requirements​

DefenseMessage Text
PIN verifiedPIN VERIFIED
Signature obtainedSIGNATURE
Below thresholdUNDER THRESHOLD

Second Presentment Time Frames​

RegionWindow
Standard45 calendar days
Costa Rica10 calendar days
Kazakhstan30 calendar days
Nigeria2 business days
Tanzania20 calendar days

Which defenses hold up​

ScenarioHow it holds up
PIN verified onlineStrongest
Signature (where permitted)Weaker
No PIN/signatureRarely wins

Track your own win rate by reason code instead of relying on a general figure.

Difference from 4870​

CodeScenarioCard Type
4870Counterfeit cardFake chip card
4871Lost/stolen/NRILegitimate card, wrong hands
  • 4870 - Chip Liability Shift (Counterfeit)
  • 4837 - No Cardholder Authorization

Prevention Strategies​

Terminal Configuration​

  1. Require PIN for debit - Always prompt
  2. Configure thresholds properly - Honor network limits
  3. No PIN bypass - Disable where not permitted
  4. CVM enforcement - Don't skip verification

Transaction Monitoring​

  1. Velocity checks - Multiple transactions same card
  2. Geographic anomalies - Impossible travel
  3. High-risk indicators - Gift cards, high value
  4. Real-time alerts - Suspicious patterns

Staff Training​

  1. Card inspection - Check for tampering
  2. Signature verification - Compare to card
  3. Suspicious behavior - Report concerns
  4. PIN entry privacy - Shield keypad

See Also​

Something wrong on this page? Email matt at paymentsandrisk.com and say what needs fixing.