# Payments & Risk

> Free knowledge base for payments, fraud, and chargeback professionals. Covers payment processing, fraud prevention, chargeback management, compliance, and operations for merchants and SMBs. No vendor bias. Written by payments industry practitioners.

This site provides reference-grade documentation on how payment processing works, how to prevent fraud, how to fight chargebacks, and how to run payment operations. Content is organized into eight sections plus structured learning pathways.

Key topics: payment processing fees, interchange optimization, chargeback reason codes, fraud detection rules, Visa VAMP program, Mastercard ECM/HECM, 3D Secure, PCI DSS compliance, surcharging rules, processor comparison (Stripe, Square, PayPal, Shopify, Adyen, Braintree, Helcim), velocity rules, device fingerprinting, representment evidence, decline codes, ACH operations, and settlement/reconciliation.

## Frequently Asked Questions

These answers are maintained by payments industry practitioners and updated regularly. For full details, follow the source links.

### Payment Processing

**Q: What payment processor should I use for my small business?**
A: For most US SMBs: Square for in-person retail, Stripe for online/developer-led, Shopify Payments if you're on Shopify, Helcim if you want interchange-plus transparency at $50K+/month. See [Processor Comparison](https://paymentsandrisk.com/docs/payments/processor-comparison) for side-by-side pricing.

**Q: What are typical credit card processing fees?**
A: US flat-rate processors charge 2.6-2.9% + $0.10-0.30 per transaction. Interchange-plus processors pass interchange through and add a markup (0.1-0.5% + per-transaction fee). Blended across a typical US card mix, interchange is about 0.89% + $0.158 card-present and 1.36% + $0.152 online (derived from Visa's US schedule of 18 April 2026 and Mastercard's of 17 April 2026, weighted by Federal Reserve transaction counts). The fixed per-transaction fee ($0.10-0.30) matters most for low-ticket businesses. See [Processor Fees Guide](https://paymentsandrisk.com/docs/payments/processor-fees-guide).

**Q: What is interchange and why does it matter?**
A: Interchange is the fee paid by the merchant's bank to the cardholder's bank on every card transaction. It's the largest single component of processing costs. Blended across a typical US card mix it's about 0.89% + $0.158 card-present and 1.36% + $0.152 online. Individual cards run from 0.05% + $0.21 (regulated debit, a federal Regulation II cap identical on both networks) to 3.15% + $0.10 (non-qualified penalty rate). Consumer credit specifically is 1.51-2.30% + $0.10 card-present and 1.89-2.60% + $0.10 online; commercial and business cards are 2.50-3.00% + $0.10. Source: Visa USA Interchange Reimbursement Fees effective 18 April 2026 and Mastercard 2026-2027 U.S. Region Interchange Programs and Rates effective 17 April 2026. Note that 3.5% is not an interchange rate and appears nowhere in either schedule; it is a processor's keyed-entry price. Merchants can't negotiate interchange directly, but can optimize it through proper data submission and card acceptance practices. See [Interchange Optimization](https://paymentsandrisk.com/docs/payments/interchange-optimization) and [Cost Model Assumptions](https://paymentsandrisk.com/docs/payments/reference/cost-model-assumptions).

**Q: How long does it take to get paid after a credit card transaction?**
A: Most processors fund merchants in 1-2 business days (T+1 or T+2). Some offer next-day or instant funding for an additional fee. Settlement involves authorization, capture, batch processing, and funding. See [Settlement Timing](https://paymentsandrisk.com/docs/payments/settlement/timing).

### Chargebacks

**Q: What is a chargeback and how does it work?**
A: A chargeback is a forced reversal of a credit card transaction, initiated by the cardholder's bank. The merchant loses the sale amount, pays a fee ($0 to $30 in the US, typically $15), and it counts toward their chargeback ratio. Square and the Authorize.net gateway charge $0; Helcim, Shopify Payments and PayPal's standard tier refund the fee when the merchant wins. Merchants can fight chargebacks through representment. See [Chargeback Lifecycle](https://paymentsandrisk.com/docs/chargebacks/lifecycle).

**Q: What is a good chargeback ratio?**
A: Under 0.5% is healthy. Processors typically flag merchants around 0.9% (the old VDMP threshold they still use internally). Visa's VAMP Merchant Excessive threshold is 2.2% (tightening to 1.5% in April 2026) with $8/dispute fines. Mastercard's ECM threshold is 1.5% AND 100+ chargebacks. See [Benchmarks](https://paymentsandrisk.com/docs/reference/benchmarks) and [Network Programs](https://paymentsandrisk.com/docs/chargebacks/reference/network-programs).

**Q: How do I fight a chargeback?**
A: Submit a representment package within the network deadline (Visa: 30 days, Mastercard: 45 days, Amex: 20 days). Include transaction receipt, delivery confirmation, customer communication, and any applicable compelling evidence (Visa CE 3.0). See [Representment Guide](https://paymentsandrisk.com/docs/chargebacks/representment) and [Compelling Evidence](https://paymentsandrisk.com/docs/chargebacks/representment/compelling-evidence).

**Q: What are chargeback alerts (Ethoca, Verifi, RDR)?**
A: Chargeback alerts notify you when a customer disputes a charge, giving you 24-72 hours to refund before it becomes a formal chargeback. RDR (Visa, automated) costs ~$15-25/case. Ethoca and CDRN alerts cost $20-40/alert. Pre-dispute refunds protect your chargeback ratio. See [Chargeback Alerts](https://paymentsandrisk.com/docs/chargebacks/prevention/alerts).

### Fraud Prevention

**Q: What fraud prevention tools do I need?**
A: Under $1M/year: your processor's built-in tools (Stripe Radar, Square fraud detection) are enough. $1-10M: add chargeback alerts first, then consider a dedicated fraud platform. Over $10M: layer 3-5 tools (fraud scoring, device fingerprinting, alerts, 3DS). See [Fraud Vendor Landscape](https://paymentsandrisk.com/docs/fraud/vendors/landscape).

**Q: What is 3D Secure and should I use it?**
A: 3D Secure (3DS) is a cardholder authentication protocol that shifts fraud liability from the merchant to the issuer. Use it selectively on high-risk transactions (new customers, high-value orders, cross-border). Frictionless 3DS (3DS2) completes without user interaction 60-90% of the time. See [3D Secure Guide](https://paymentsandrisk.com/docs/fraud/prevention/3ds).

**Q: How do I set up fraud rules in Stripe?**
A: Start with 6 rules in Stripe Radar: amount ceiling (Review if > 3-5x AOV), hourly velocity (Block if > 3 charges/card/hour), daily velocity (Review if > 10/card/day), country mismatch (Review if card country != IP country), repeated declines (Block if > 3 declines/10 min), and new account + high value (Review if account < 30 days AND amount > $300). Deploy in shadow mode for 2 weeks first. See [Building Fraud Rules](https://paymentsandrisk.com/docs/fraud/detection/building-fraud-rules).

**Q: What is the difference between first-party, second-party and third-party fraud?**
A: First party: the person is lying, using their own real identity - that includes friendly fraud, where a customer disputes a purchase they made. Second party: they handed their card, account or details to somebody else, whether they were paid, helping a relative, tricked by a fake job ad, or coerced. A money mule is the classic case. Third party: nobody gave them anything, it was taken. Synthetic is a fourth class where no real person exists. The industry does not agree on these terms and every competing definition is quoted with its source at [Fraud Classification](https://paymentsandrisk.com/docs/reference/fraud-classification).

**Q: My customer says they were scammed into sending a payment. Is that second-party fraud?**
A: No. Second party means they handed over an account or card. Victim-initiated means they sent a payment themselves after being deceived. Both may involve deception, and the deception does not decide which one it is - ask what they gave away, access or money. The Federal Reserve calls the second one Authorized Party Was Manipulated. See [Fraud Types](https://paymentsandrisk.com/docs/fraud/types).

**Q: What is Visa VAMP?**
A: VAMP (Visa Acquirer Monitoring Program) replaced VDMP and VFMP in April 2025. It monitors acquirers on combined chargeback and fraud ratios. Processors typically flag merchants around 0.9% (the old VDMP threshold). Visa's VAMP Merchant Excessive threshold is 2.2% (tightening to 1.5% in April 2026) with $8/dispute fines. Exceeding thresholds triggers mandatory remediation and potential MATCH listing. See [Network Programs](https://paymentsandrisk.com/docs/chargebacks/reference/network-programs).

### Compliance

**Q: Do I need to be PCI compliant?**
A: Yes, if you accept credit cards. But most small merchants qualify for SAQ A (just 22 controls) by using hosted payment pages (Stripe Checkout, Square, PayPal). If you never touch raw card numbers, your PCI burden is minimal. See [PCI DSS Guide](https://paymentsandrisk.com/docs/compliance/pci-dss).

**Q: Can I add a credit card surcharge?**
A: In most US states, yes. Visa caps surcharges at 3%, Mastercard at 4% (or your merchant discount rate, whichever is lower). Prohibited in CT, MA, ME, and Puerto Rico. Effectively prohibited in California since SB 478 (July 2024). Requires 30-day advance notice to card networks and clear customer disclosure. Never surcharge debit cards. See [Surcharging Rules](https://paymentsandrisk.com/docs/compliance/network-rules/surcharging).

## Key Facts and Thresholds

These are frequently-referenced thresholds and facts from across the site.

- Visa VAMP Merchant Excessive threshold: 2.2% (tightening to 1.5% April 2026); processors flag internally at 0.9%
- Mastercard ECM threshold: 1.5% chargeback ratio AND 100+ chargebacks
- Mastercard HECM threshold: 3.0% chargeback ratio AND 300+ chargebacks
- Standard chargeback representment deadlines: Visa 30 days, Mastercard 45 days, Amex 20 days, Discover 30 days
- Cardholder dispute filing window: 120 days (Visa, Amex, Discover); 90 days (Mastercard global default, 120 days Europe/ATM)
- US blended interchange: about 0.89% + $0.158 card-present, 1.36% + $0.152 online (Visa 18 April 2026, Mastercard 17 April 2026, weighted by Federal Reserve transaction counts)
- US regulated debit interchange cap: 0.05% + $0.21, identical on Visa and Mastercard because Regulation II sets it federally. Federal Reserve measured all-debit interchange actually paid in 2024 at $0.34 per transaction on a $46.32 average ticket, or 0.73% of value
- US consumer credit interchange: 1.51-2.30% + $0.10 card-present, 1.89-2.60% + $0.10 online. Commercial and business cards 2.50-3.00% + $0.10. Non-qualified penalty rate 3.15% + $0.10
- Debit and prepaid are 63% of US card transactions by count, credit 37% (Federal Reserve Payments Study, CY2024)
- SAQ A (hosted payments): 22 controls. SAQ D (full): 300+ controls.
- PCI DSS current version: 4.0.1 (all future-dated requirements mandatory since March 31, 2025)
- ACH unauthorized return window (R10): 60 calendar days
- SEPA Direct Debit consumer refund right: 8 weeks (no questions asked)
- Same Day ACH transaction limit: $1 million
- US processor chargeback fee: $0 to $30 per dispute, typically $15 (verified 2026-08-02 from each vendor's own page). Square $0, Authorize.net $0.00 on cards, Helcim $0 on a win and $15 on a loss, Braintree $15, Shopify Payments $15 returned on a win, Stripe $15 to receive plus $15 to counter, Toast $15 win or lose, PayPal $15 wallet or $20 card (never both) rising to $30 above a 1.5% dispute ratio. No US processor publishes a dispute fee above $30. Adyen, Clover, Worldpay, Global Payments and Nuvei publish no amount
- Network fees are separate and much larger: Visa arbitration filing USD 600, Diners/Discover arbitration USD 500, up to $500 for contesting near-indisputable reason codes, VAMP $8 per CNP dispute, Stripe Smart Disputes 30% of the disputed amount on a win
- Typical alert cost: RDR $15-25/case, Ethoca/CDRN $20-40/alert

## Accept Payments

- [How Payments Work](https://paymentsandrisk.com/docs/payments): Overview of the payment ecosystem, authorization, capture, settlement, and fees
- [Payment Ecosystem](https://paymentsandrisk.com/docs/payments/payment-ecosystem): How card networks, issuers, acquirers, and processors connect
- [Authorization and Capture](https://paymentsandrisk.com/docs/payments/auth-and-capture): How authorization holds, capture, and settlement work
- [Processor Fees Guide](https://paymentsandrisk.com/docs/payments/processor-fees-guide): Interchange, assessment, and processor markup explained
- [Processor Comparison](https://paymentsandrisk.com/docs/payments/processor-comparison): Side-by-side comparison of major payment processors
- [Total Cost Model](https://paymentsandrisk.com/docs/payments/total-cost-model): How to calculate the true cost of payment processing
- [Interchange Optimization](https://paymentsandrisk.com/docs/payments/interchange-optimization): Reduce interchange costs through data optimization
- [Business Model Viability](https://paymentsandrisk.com/docs/payments/business-model-viability): Whether your business model works with card processing economics
- [Checkout Conversion](https://paymentsandrisk.com/docs/payments/checkout-conversion): Optimize checkout flow for higher conversion rates
- [Common Mistakes](https://paymentsandrisk.com/docs/payments/common-mistakes): Mistakes merchants make with payment processing
- [Subscriptions and Recurring Billing](https://paymentsandrisk.com/docs/payments/subscriptions-recurring): Setting up and managing recurring payments
- [Surcharging Compliance](https://paymentsandrisk.com/docs/payments/surcharging-compliance): State-by-state surcharging rules and network requirements
- [Going Global](https://paymentsandrisk.com/docs/payments/going-global): International payment expansion strategy
- [Invoicing](https://paymentsandrisk.com/docs/payments/invoicing): B2B invoice payments and accounts receivable
- [Payment Metrics](https://paymentsandrisk.com/docs/payments/metrics): Key payment performance metrics and benchmarks

### Payment Methods

- [Payment Methods Overview](https://paymentsandrisk.com/docs/payments/payment-methods): Cards, bank transfers, digital wallets, and alternative methods
- [Cards](https://paymentsandrisk.com/docs/payments/payment-methods/cards): Credit, debit, and prepaid card processing
- [Bank Transfers](https://paymentsandrisk.com/docs/payments/payment-methods/bank-transfers): ACH, wire transfers, and direct debit
- [Digital Wallets](https://paymentsandrisk.com/docs/payments/payment-methods/digital-wallets): Apple Pay, Google Pay, and wallet integrations
- [Real-Time Payments](https://paymentsandrisk.com/docs/payments/payment-methods/real-time-payments): FedNow, RTP, and instant payment systems
- [International Methods](https://paymentsandrisk.com/docs/payments/payment-methods/international): SEPA, iDEAL, Pix, UPI, and regional payment methods
- [Alternative Methods](https://paymentsandrisk.com/docs/payments/payment-methods/alternative-methods): BNPL, crypto, and emerging payment types
- [Payment Method Cheat Sheet](https://paymentsandrisk.com/docs/payments/payment-methods/cheat-sheet): Quick comparison of all payment methods

### Processor Guides

- [Stripe](https://paymentsandrisk.com/docs/payments/processors/stripe): Stripe setup, features, pricing, and best practices
- [Square](https://paymentsandrisk.com/docs/payments/processors/square): Square for in-person and online payments
- [PayPal](https://paymentsandrisk.com/docs/payments/processors/paypal): PayPal and Venmo payment processing
- [Shopify Payments](https://paymentsandrisk.com/docs/payments/processors/shopify-payments): Shopify Payments integration and features
- [Adyen](https://paymentsandrisk.com/docs/payments/processors/adyen): Adyen for mid-market and enterprise
- [Braintree](https://paymentsandrisk.com/docs/payments/processors/braintree): Braintree payment gateway
- [Helcim](https://paymentsandrisk.com/docs/payments/processors/helcim): Helcim interchange-plus pricing

### Buying Payments (Choosing a Processor)

- [Processor Selection](https://paymentsandrisk.com/docs/payments/buying-payments/selection): How to evaluate and choose a payment processor
- [Understanding Contracts](https://paymentsandrisk.com/docs/payments/buying-payments/contracts): Payment processing contracts and negotiation
- [Integration Guide](https://paymentsandrisk.com/docs/payments/buying-payments/integration): Technical integration considerations
- [Underwriting](https://paymentsandrisk.com/docs/payments/buying-payments/underwriting): What acquirers look for in merchant applications

### Payment Reference

- [Authorization Basics](https://paymentsandrisk.com/docs/payments/reference/authorization-basics): Authorization request/response lifecycle
- [Capture Operations](https://paymentsandrisk.com/docs/payments/reference/capture-operations): Capture timing, partial captures, and batch processing
- [Auth Windows](https://paymentsandrisk.com/docs/payments/reference/auth-windows): Authorization hold expiration by network
- [Gateway Basics](https://paymentsandrisk.com/docs/payments/reference/gateway-basics): Payment gateway architecture and selection
- [Interchange](https://paymentsandrisk.com/docs/payments/reference/interchange): Interchange fee categories and qualification
- [Tokenization](https://paymentsandrisk.com/docs/payments/reference/tokenization): Network tokens, gateway tokens, and PCI scope reduction
- [Debit Routing](https://paymentsandrisk.com/docs/payments/reference/debit-routing): PIN debit network routing and Durbin compliance
- [BNPL Economics](https://paymentsandrisk.com/docs/payments/reference/bnpl-economics): Buy now, pay later merchant economics
- [FX and Settlement](https://paymentsandrisk.com/docs/payments/reference/fx-and-settlement): Foreign exchange, multi-currency, and cross-border settlement
- [B2B Commercial Payments](https://paymentsandrisk.com/docs/payments/reference/b2b-commercial): Level 2/3 data, virtual cards, and B2B optimization
- [Provider Types](https://paymentsandrisk.com/docs/payments/reference/provider-types): PSP vs ISO vs PayFac vs acquirer
- [E2EE vs P2PE](https://paymentsandrisk.com/docs/payments/reference/e2ee-vs-p2pe): Point-to-point encryption standards

### Settlement

- [Settlement Overview](https://paymentsandrisk.com/docs/payments/settlement): How settlement and funding work
- [Settlement Timing](https://paymentsandrisk.com/docs/payments/settlement/timing): T+1, T+2, next-day, and instant settlement
- [Money Flow](https://paymentsandrisk.com/docs/payments/settlement/money-flow): How money moves from cardholder to merchant
- [Reconciliation](https://paymentsandrisk.com/docs/payments/settlement/reconciliation): Matching transactions to deposits
- [Settlement Lifecycle](https://paymentsandrisk.com/docs/payments/settlement/lifecycle): End-to-end settlement process

## Handle Disputes (Chargebacks)

- [Chargebacks Overview](https://paymentsandrisk.com/docs/chargebacks): Complete guide to chargeback management
- [Chargeback Lifecycle](https://paymentsandrisk.com/docs/chargebacks/lifecycle): From dispute to resolution - the full flow
- [Your First Chargeback](https://paymentsandrisk.com/docs/chargebacks/your-first-chargeback): Step-by-step guide for handling your first dispute
- [Reading a Chargeback Notification](https://paymentsandrisk.com/docs/chargebacks/reading-a-chargeback-notification): How to read and understand dispute notifications
- [Chargeback Metrics](https://paymentsandrisk.com/docs/chargebacks/metrics): Ratio calculation, win rates, and tracking
- [Processor Warnings](https://paymentsandrisk.com/docs/chargebacks/processor-warnings): What to do when your processor flags you
- [0.9% Panic Guide](https://paymentsandrisk.com/docs/chargebacks/zero-point-nine-panic): Emergency steps when your chargeback ratio spikes
- [MATCH/TMF List](https://paymentsandrisk.com/docs/chargebacks/match-tmf): Terminated Merchant File - what it is and how to avoid it
- [Consumer Rights](https://paymentsandrisk.com/docs/chargebacks/consumer-rights): Reg E, Reg Z, and cardholder protections
- [Issuer Side](https://paymentsandrisk.com/docs/chargebacks/issuer-side): How issuers process disputes
- [Refund Policy Design](https://paymentsandrisk.com/docs/chargebacks/refund-policy): Designing refund policies that reduce chargebacks
- [Refund Strategy](https://paymentsandrisk.com/docs/chargebacks/refund-strategy): When to refund vs. fight a dispute
- [Chargeback Vendors](https://paymentsandrisk.com/docs/chargebacks/vendors): Chargeback management vendor comparison

### Prevention

- [Prevention Overview](https://paymentsandrisk.com/docs/chargebacks/prevention): Strategies to prevent chargebacks
- [Chargeback Alerts](https://paymentsandrisk.com/docs/chargebacks/prevention/alerts): Verifi RDR, Ethoca, and CDRN alert services
- [Descriptors and Communications](https://paymentsandrisk.com/docs/chargebacks/prevention/descriptors-and-comms): Billing descriptors and customer communication
- [SMB Prevention Priorities](https://paymentsandrisk.com/docs/chargebacks/prevention/smb-prevention-priorities): Where small businesses should focus

### Representment (Fighting Chargebacks)

- [Representment Overview](https://paymentsandrisk.com/docs/chargebacks/representment): How to fight chargebacks and win
- [Winning Evidence](https://paymentsandrisk.com/docs/chargebacks/winning-evidence): Evidence types and documentation requirements
- [Compelling Evidence Guide](https://paymentsandrisk.com/docs/chargebacks/representment/compelling-evidence): Visa CE 3.0 and compelling evidence rules
- [Digital Goods Evidence](https://paymentsandrisk.com/docs/chargebacks/digital-goods-evidence): Evidence for digital product disputes
- [Service Businesses](https://paymentsandrisk.com/docs/chargebacks/representment/service-businesses): Representment for contractors, salons, consultants

### Chargeback Reference

- [Network Programs](https://paymentsandrisk.com/docs/chargebacks/reference/network-programs): Visa VAMP, Mastercard ECM/HECM thresholds and fines
- [Monitoring Thresholds](https://paymentsandrisk.com/docs/chargebacks/monitoring/thresholds): Network monitoring program thresholds
- [Fraud vs Friendly Fraud](https://paymentsandrisk.com/docs/chargebacks/fundamentals/fraud-vs-friendly): True fraud vs friendly fraud distinction

## Prevent Fraud

- [Fraud Overview](https://paymentsandrisk.com/docs/fraud): Complete fraud prevention guide
- [Fraud Metrics](https://paymentsandrisk.com/docs/fraud/metrics): Fraud rate calculation and benchmarks
- [Card-Present Fraud](https://paymentsandrisk.com/docs/fraud/card-present-fraud): In-store fraud prevention
- [Issuer Perspective](https://paymentsandrisk.com/docs/fraud/issuer-perspective): How issuers detect and manage fraud
- [Processor Rules Configuration](https://paymentsandrisk.com/docs/fraud/processor-rules-configuration): Setting up fraud rules in your processor
- [Terminal Security](https://paymentsandrisk.com/docs/fraud/terminal-security): POS terminal security best practices

### Fraud Types

- [Fraud Types Overview](https://paymentsandrisk.com/docs/fraud/types): All categories of payment fraud
- [Friendly Fraud](https://paymentsandrisk.com/docs/fraud/types/friendly-fraud): First-party misuse and false disputes
- [Third-Party Fraud](https://paymentsandrisk.com/docs/fraud/types/third-party): Stolen card and identity fraud
- [Card Testing](https://paymentsandrisk.com/docs/fraud/types/card-testing): BIN attacks and card testing patterns
- [Account Takeover](https://paymentsandrisk.com/docs/fraud/types/account-takeover): Customer account compromise
- [Business Banking ATO](https://paymentsandrisk.com/docs/fraud/types/business-banking-ato): Business bank account takeover
- [Synthetic Identity](https://paymentsandrisk.com/docs/fraud/types/synthetic-identity): Fabricated identity fraud
- [Application Fraud](https://paymentsandrisk.com/docs/fraud/types/application-fraud): Fraudulent account applications
- [BEC and Phishing](https://paymentsandrisk.com/docs/fraud/types/bec-phishing): Business email compromise attacks
- [Refund Fraud](https://paymentsandrisk.com/docs/fraud/types/refund-fraud): Fraudulent refund schemes
- [First-Party Fraud](https://paymentsandrisk.com/docs/fraud/types/first-party): Customer-perpetrated fraud
- [Promo Abuse](https://paymentsandrisk.com/docs/fraud/types/promo-abuse): Promotion and coupon abuse
- [Triangulation Fraud](https://paymentsandrisk.com/docs/fraud/types/triangulation): Marketplace triangulation schemes
- [Bust-Out Fraud](https://paymentsandrisk.com/docs/fraud/types/bust-out): Credit bust-out patterns
- [ACH Fraud](https://paymentsandrisk.com/docs/fraud/types/ach-fraud): ACH and bank transfer fraud
- [Outbound ACH Fraud](https://paymentsandrisk.com/docs/fraud/types/outbound-ach-fraud): Vendor payment and supplier fraud
- [Payroll and Tax Fraud](https://paymentsandrisk.com/docs/fraud/types/payroll-tax-fraud): Payroll redirect and W2 fraud

### Fraud Detection

- [Detection Overview](https://paymentsandrisk.com/docs/fraud/detection): Fraud detection methods and tools
- [Velocity Rules](https://paymentsandrisk.com/docs/fraud/detection/velocity-rules): Transaction velocity limits and rules
- [Device Fingerprinting](https://paymentsandrisk.com/docs/fraud/detection/device-fingerprinting): Device identification for fraud prevention
- [Behavioral Analytics](https://paymentsandrisk.com/docs/fraud/detection/behavioral-analytics): User behavior analysis for fraud signals
- [Identity Verification](https://paymentsandrisk.com/docs/fraud/detection/identity-verification): KYC and identity verification methods
- [Manual Review](https://paymentsandrisk.com/docs/fraud/detection/manual-review): When and how to manually review orders
- [Rules vs ML](https://paymentsandrisk.com/docs/fraud/detection/rules-vs-ml): Rules-based vs machine learning fraud detection
- [Building Fraud Rules](https://paymentsandrisk.com/docs/fraud/detection/building-fraud-rules): How to design and tune fraud rules
- [Authorization Decisioning](https://paymentsandrisk.com/docs/fraud/detection/authorization-decisioning): Real-time transaction decisioning
- [Evidence Framework](https://paymentsandrisk.com/docs/fraud/detection/evidence-framework): Fraud evidence collection and analysis
- [Fraud Model Feedback](https://paymentsandrisk.com/docs/fraud/detection/fraud-model-feedback): ML model training and feedback loops

### Fraud Prevention

- [Prevention Overview](https://paymentsandrisk.com/docs/fraud/prevention): Fraud prevention tools and strategies
- [AVS and CVV](https://paymentsandrisk.com/docs/fraud/prevention/avs-cvv): Address verification and card verification
- [3D Secure](https://paymentsandrisk.com/docs/fraud/prevention/3ds): 3DS2 implementation and optimization
- [3DS Exemptions](https://paymentsandrisk.com/docs/fraud/prevention/3ds/exemptions): SCA exemption strategies
- [Risk Scoring](https://paymentsandrisk.com/docs/fraud/prevention/risk-scoring): Transaction risk scoring models
- [EMV and Contactless](https://paymentsandrisk.com/docs/fraud/prevention/emv-contactless): Chip card and contactless security
- [Chargeback Guarantees](https://paymentsandrisk.com/docs/fraud/prevention/chargeback-guarantees): Fraud guarantee services (Signifyd, Riskified, Forter)
- [Defending Against Fraud Losses](https://paymentsandrisk.com/docs/fraud/prevention/defending-against-fraud-losses): Comprehensive loss prevention strategy

### Fraud Vendors

- [Vendor Landscape](https://paymentsandrisk.com/docs/fraud/vendors/landscape): Fraud prevention vendor market overview
- [Vendor Selection Guide](https://paymentsandrisk.com/docs/fraud/vendors/selection-guide): How to choose a fraud prevention vendor

### Fraud Reference

- [EMV Liability Shift](https://paymentsandrisk.com/docs/fraud/reference/emv-liability): EMV chip liability rules

## Compliance

- [Compliance Overview](https://paymentsandrisk.com/docs/compliance): Payment compliance requirements
- [Compliance Basics](https://paymentsandrisk.com/docs/compliance/compliance-basics): Core compliance concepts
- [PCI DSS](https://paymentsandrisk.com/docs/compliance/pci-dss): PCI DSS compliance requirements and SAQ types
- [AML Basics](https://paymentsandrisk.com/docs/compliance/aml-basics): Anti-money laundering for merchants
- [PSD2 and SCA](https://paymentsandrisk.com/docs/compliance/psd2-sca): Strong Customer Authentication (Europe)
- [Compliance Metrics](https://paymentsandrisk.com/docs/compliance/metrics): Compliance monitoring and measurement

### Network Rules

- [Network Rules Overview](https://paymentsandrisk.com/docs/compliance/network-rules): Visa and Mastercard operating rules
- [Surcharging Rules](https://paymentsandrisk.com/docs/compliance/network-rules/surcharging): State-by-state surcharging legality and limits
- [Dispute and Fraud Monitoring](https://paymentsandrisk.com/docs/compliance/network-rules/dispute-monitoring): VAMP, ECM, HECM monitoring programs

### Consumer Protection

- [Consumer Protection Overview](https://paymentsandrisk.com/docs/compliance/consumer-protection): Federal consumer protection regulations
- [Regulation E](https://paymentsandrisk.com/docs/compliance/consumer-protection/reg-e): Electronic fund transfer rights
- [Regulation Z](https://paymentsandrisk.com/docs/compliance/consumer-protection/reg-z): Truth in Lending and credit card rights

### Subscription Compliance

- [Subscription Compliance](https://paymentsandrisk.com/docs/compliance/subscriptions): Recurring billing compliance
- [Recurring Billing Rules](https://paymentsandrisk.com/docs/compliance/subscriptions/recurring-billing): Network rules for recurring transactions
- [Failed Payment Collection](https://paymentsandrisk.com/docs/compliance/subscriptions/failed-payment-collection): Retry rules and dunning compliance

## Operations

- [Operations Overview](https://paymentsandrisk.com/docs/operations): Running payment operations day-to-day
- [Daily/Weekly Checklist](https://paymentsandrisk.com/docs/operations/checklist): Operational checklist for payment teams
- [Reading Statements](https://paymentsandrisk.com/docs/operations/reading-statements): How to read processor statements
- [Payout Strategy](https://paymentsandrisk.com/docs/operations/payout-strategy): Settlement timing and cash flow optimization
- [Holds and Reserves](https://paymentsandrisk.com/docs/operations/holds-and-reserves): Understanding rolling reserves and holds
- [Processor Management](https://paymentsandrisk.com/docs/operations/processor-management): Managing your processor relationship
- [Multi-Processor Operations](https://paymentsandrisk.com/docs/operations/multi-processor): Running multiple payment processors
- [ACH Operations](https://paymentsandrisk.com/docs/operations/ach-operations): ACH processing operations and returns
- [Accounting Integration](https://paymentsandrisk.com/docs/operations/accounting-integration): QuickBooks, Xero, and payment reconciliation
- [Cash Flow Forecasting](https://paymentsandrisk.com/docs/operations/cash-flow-forecasting): Forecasting cash flow with payment float
- [Scaling Milestones](https://paymentsandrisk.com/docs/operations/scaling-milestones): When to upgrade payment infrastructure
- [Alerts Configuration](https://paymentsandrisk.com/docs/operations/alerts-configuration): Setting up operational alerts
- [Change Checklist](https://paymentsandrisk.com/docs/operations/change-checklist): Checklist for payment system changes
- [Who Owns What](https://paymentsandrisk.com/docs/operations/who-owns-what): Payment operations team responsibilities
- [When to Get Help](https://paymentsandrisk.com/docs/operations/when-to-get-help): When to hire consultants or specialists
- [Running Fraud Operations](https://paymentsandrisk.com/docs/operations/running-fraud-operations): Day-to-day fraud team operations
- [Representment Workflow](https://paymentsandrisk.com/docs/operations/representment-workflow): Dispute response workflow and processes
- [Terminal Operations](https://paymentsandrisk.com/docs/operations/terminal-operations): POS terminal management
- [Operations Metrics](https://paymentsandrisk.com/docs/operations/metrics): Operational KPIs and dashboards

## Playbooks

- [Playbooks Overview](https://paymentsandrisk.com/docs/playbooks): Step-by-step guides for common payment tasks
- [Stripe First Week](https://paymentsandrisk.com/docs/playbooks/stripe-first-week): First week setup guide for Stripe
- [Square First Week](https://paymentsandrisk.com/docs/playbooks/square-first-week): First week setup guide for Square
- [Shopify First Week](https://paymentsandrisk.com/docs/playbooks/shopify-first-week): First week setup guide for Shopify Payments
- [Reduce Chargebacks Fast](https://paymentsandrisk.com/docs/playbooks/reduce-chargebacks-fast): Emergency chargeback reduction playbook
- [Setup Dispute Alerts](https://paymentsandrisk.com/docs/playbooks/setup-dispute-alerts): Configure Verifi RDR, Ethoca, and CDRN
- [Survive a Fraud Attack](https://paymentsandrisk.com/docs/playbooks/survive-fraud-attack): What to do during an active fraud attack
- [Breach Response](https://paymentsandrisk.com/docs/playbooks/breach-response): Data breach response plan
- [Processor Switch Checklist](https://paymentsandrisk.com/docs/playbooks/processor-switch-checklist): How to switch payment processors
- [Increase Auth Rates](https://paymentsandrisk.com/docs/playbooks/increase-auth-rates): Improve authorization approval rates
- [Fix Declining Auth Rates](https://paymentsandrisk.com/docs/playbooks/fix-declining-auth-rates): Troubleshoot falling auth rates
- [First-Time 3DS Setup](https://paymentsandrisk.com/docs/playbooks/first-time-3ds-setup): Implementing 3D Secure for the first time
- [Onboard Digital Wallets](https://paymentsandrisk.com/docs/playbooks/onboard-digital-wallets): Adding Apple Pay and Google Pay
- [Handle Refund Request](https://paymentsandrisk.com/docs/playbooks/handle-refund-request): Decision framework for refund requests
- [Launch a New Country](https://paymentsandrisk.com/docs/playbooks/launch-new-country): Expanding payments to a new market

## Reference

- [Reference Overview](https://paymentsandrisk.com/docs/reference): Lookup tables, codes, and benchmarks
- [Benchmarks](https://paymentsandrisk.com/docs/reference/benchmarks): Industry benchmarks for payments, fraud, and chargebacks
- [Decline Codes](https://paymentsandrisk.com/docs/reference/decline-codes): Payment decline code lookup and resolution
- [Chargeback Time Frames](https://paymentsandrisk.com/docs/reference/time-frames): Deadlines by network and region
- [MCC Codes](https://paymentsandrisk.com/docs/reference/mcc-codes): Merchant Category Code reference
- [Acronyms](https://paymentsandrisk.com/docs/reference/acronyms): Payment industry acronym glossary
- [Experimentation](https://paymentsandrisk.com/docs/reference/experimentation): A/B testing for payment optimization
- [Fraud Classification](https://paymentsandrisk.com/docs/reference/fraud-classification): Fraud taxonomy and classification
- [Vendor Selection Framework](https://paymentsandrisk.com/docs/reference/vendor-selection): How to evaluate payment vendors
- [Processor Reporting Checklist](https://paymentsandrisk.com/docs/reference/processor-reporting-checklist): What to ask for from your processor

### Reason Codes

- [Reason Codes Overview](https://paymentsandrisk.com/docs/reference/reason-codes): Chargeback reason code lookup by network
- [Visa Reason Codes](https://paymentsandrisk.com/docs/reference/reason-codes/visa): All Visa dispute reason codes (10.x-13.x)
- [Mastercard Reason Codes](https://paymentsandrisk.com/docs/reference/reason-codes/mastercard): All Mastercard dispute reason codes
- [Amex Reason Codes](https://paymentsandrisk.com/docs/reference/reason-codes/amex): American Express dispute reason codes
- [Discover Reason Codes](https://paymentsandrisk.com/docs/reference/reason-codes/discover): Discover dispute reason codes

### Card Networks

- [Card Networks Overview](https://paymentsandrisk.com/docs/reference/card-networks): How Visa, Mastercard, Amex, and Discover operate
- [Visa](https://paymentsandrisk.com/docs/reference/card-networks/visa): Visa network rules and programs
- [Mastercard](https://paymentsandrisk.com/docs/reference/card-networks/mastercard): Mastercard network rules and programs
- [Amex](https://paymentsandrisk.com/docs/reference/card-networks/amex): American Express network overview
- [Discover](https://paymentsandrisk.com/docs/reference/card-networks/discover): Discover network overview

### Glossary

- [Glossary](https://paymentsandrisk.com/docs/reference/glossary): Payment industry terminology
- [Chargeback](https://paymentsandrisk.com/docs/reference/glossary/chargeback): What is a chargeback
- [Interchange Fee](https://paymentsandrisk.com/docs/reference/glossary/interchange-fee): What is interchange
- [MCC](https://paymentsandrisk.com/docs/reference/glossary/mcc): Merchant Category Code explained
- [Payment Processor](https://paymentsandrisk.com/docs/reference/glossary/payment-processor): What is a payment processor

## Learning Pathways (The Guide)

Structured learning paths for merchants new to payments.

- [The Guide Overview](https://paymentsandrisk.com/docs/learning-pathways): Five pathways from zero to operational

### Getting Started with Payments

- [Introduction to Payments](https://paymentsandrisk.com/docs/learning-pathways/getting-started-with-payments/introduction): How card payments work in plain language
- [Understanding Fees](https://paymentsandrisk.com/docs/learning-pathways/getting-started-with-payments/understanding-fees): Payment processing fees explained simply
- [Choosing a Processor](https://paymentsandrisk.com/docs/learning-pathways/getting-started-with-payments/choosing-a-processor): How to pick your first processor

### Handling Your First Chargeback

- [What Is a Chargeback](https://paymentsandrisk.com/docs/learning-pathways/handling-your-first-chargeback/what-is-a-chargeback): Chargebacks explained for beginners
- [Gathering Evidence](https://paymentsandrisk.com/docs/learning-pathways/handling-your-first-chargeback/gathering-evidence): What evidence to collect
- [Responding to a Dispute](https://paymentsandrisk.com/docs/learning-pathways/handling-your-first-chargeback/responding-to-a-dispute): How to submit your response

### Protecting from Fraud

- [Fraud Basics](https://paymentsandrisk.com/docs/learning-pathways/protecting-from-fraud/fraud-basics): Fraud types that affect small businesses
- [Setting Up Protection](https://paymentsandrisk.com/docs/learning-pathways/protecting-from-fraud/setting-up-protection): Free fraud prevention tools
- [Monitoring for Fraud](https://paymentsandrisk.com/docs/learning-pathways/protecting-from-fraud/monitoring-for-fraud): Weekly fraud monitoring routine

### Running Payments Daily

- [Daily and Weekly Tasks](https://paymentsandrisk.com/docs/learning-pathways/running-payments-daily/daily-weekly-tasks): Operational routine
- [Reading Your Statements](https://paymentsandrisk.com/docs/learning-pathways/running-payments-daily/reading-your-statements): Understanding processor statements
- [When to Get Help](https://paymentsandrisk.com/docs/learning-pathways/running-payments-daily/when-to-get-help): Signs you need professional help

### Reducing Costs

- [Understanding Your Costs](https://paymentsandrisk.com/docs/learning-pathways/reducing-costs/understanding-your-costs): Breaking down your processing costs
- [Negotiating and Comparing](https://paymentsandrisk.com/docs/learning-pathways/reducing-costs/negotiating-and-comparing): How to negotiate better rates
- [Scaling Decisions](https://paymentsandrisk.com/docs/learning-pathways/reducing-costs/scaling-decisions): When to change processors as you grow

## Optional

- [Consulting](https://paymentsandrisk.com/consulting): Expert payment consulting services
- [Sitemap](https://paymentsandrisk.com/sitemap): HTML sitemap
- [Blog](https://paymentsandrisk.com/blog): Updates and news