The Mastercard excessive chargeback program flags you at 100 chargebacks
Mastercard identifies a merchant under its Excessive Chargeback Program at 100 chargebacks in a month with a chargeback ratio of 1.50%. Visa's VAMP does not look at an individual merchant until it clears 1,500 fraud reports and disputes. Same headline percentage, a floor fifteen times apart.
That is how a store sits comfortably under Visa's line and reaches month three of a Mastercard audit at the same time.
One note on sources. Mastercard's rules live in manuals that are not openly retrievable, and its PDFs block automated access. Everything below comes from acquirer and processor reproductions: J.P. Morgan Merchant Services' ECM program FAQ, PayPal's Braintree documentation on Mastercard monitoring programs, and Moneris' risk program threshold sheet (last modified March 2025). All three checked July 23, 2026, and they agree on everything that matters.
What is the Mastercard Excessive Chargeback Program?
It is Mastercard's merchant-level chargeback monitor, and three abbreviations point at one thing. ECP is the umbrella program. ECM, Excessive Chargeback Merchant, is the entry tier. HECM, High Excessive Chargeback Merchant, is the escalated tier. Some acquirers, J.P. Morgan among them, call the whole thing "the ECM program" and treat HECM as a state inside it.
The mechanics are automated. Mastercard runs the calculation monthly against its own network data, per merchant ID, and notifies the acquirer when a MID breaches. Assessments bill to the acquirer, which is why the notice arrives from your payment provider.
What are the ECM and HECM thresholds?
Two numbers, and a merchant has to breach both at once.
| Tier | Chargebacks in the month | Chargeback-to-transaction ratio |
|---|---|---|
| Excessive Chargeback Merchant (ECM) | 100 to 299 | 1.50% to 2.99% (150 to 299 bps) |
| High Excessive Chargeback Merchant (HECM) | 300 or more | 3.00% or more (300 bps or more) |
Read the ECM row as a floor, not a strict band. A merchant at 400 chargebacks and 200 basis points has not met the High Excessive test on ratio, and sits in ECM.
The count threshold is the part worth staring at. One hundred chargebacks a month is a store doing seven thousand Mastercard orders at a 1.5% dispute rate. That is a mid-sized Shopify brand, and Visa's program does not evaluate that merchant at all.
How the ratio is calculated, and why it is not your VAMP number
From J.P. Morgan's FAQ: divide first presentment chargebacks in the current month by total sales in the prior month, then multiply by 10,000 for basis points. Braintree puts it plainly, June chargebacks over May sales.
The denominator is the part nobody flags. Visa measures disputes against settled transactions from the same month. Mastercard measures this month's chargebacks against last month's sales.
For a growing store that inflates the number. Take 8,000 Mastercard sales in May, 10,000 in June, and 130 chargebacks in June. Mastercard's method gives 163 basis points and an ECM identification. The same-month method gives 130, which is clear. The disputes did not change. The denominator did.
Seasonal stores get it on a delay. January chargebacks divide into December's peak and read better than reality. February chargebacks, still arriving from December orders, divide into January's collapse and read much worse.
The rest of the divergence is in what gets counted:
| Mastercard ECP | Visa VAMP | |
|---|---|---|
| Numerator | First presentment chargebacks, any reason code | Fraud reports (TC40) plus non-fraud disputes (TC15) |
| Denominator | Sales in the prior month | Settled transactions in the same month |
| Transaction scope | All transaction types | Card-not-present only |
| Ratio line | 1.50% (ECM), 3.00% (HECM) | 150 bps in most regions |
| Count floor | 100 chargebacks | 1,500 fraud plus disputes |
| Measured on | The merchant ID | The merchant descriptor, and the acquirer portfolio |
So an issuer fraud report that never becomes a chargeback moves your Visa ratio and does nothing to your Mastercard one, and an omnichannel brand's in-store sales enlarge the Mastercard denominator while doing nothing for Visa's.
Notice "first presentment". Mastercard counts a chargeback the moment it is filed, and J.P. Morgan's FAQ is blunt about the corollary: represented chargebacks are not used to recalculate thresholds or assessments. Winning returns the money and leaves the count where it was. What does move the numerator is resolving the dispute before the issuer files, because there is then no first presentment to count. Deflecting a dispute before the chargeback is filed is the lever, and Ethoca, the main alert network on the Mastercard side, is a Mastercard company.
What the assessments are, and how fast they escalate
Fines start in month two. Both tiers count months above threshold, not consecutive months.
| Months above threshold | ECM | HECM |
|---|---|---|
| 1 | None | None |
| 2 | USD 1,000 | USD 1,000 |
| 3 | USD 1,000 | USD 2,000 |
| 4 to 6 | USD 5,000 | USD 10,000 plus issuer recovery |
| 7 to 11 | USD 25,000 | USD 50,000 plus issuer recovery |
| 12 to 18 | USD 50,000 | USD 100,000 plus issuer recovery |
| 19 or more | USD 100,000 | USD 200,000 plus issuer recovery |
The issuer recovery assessment is separate and additive. From month four a HECM pays USD 5 per chargeback above 300. J.P. Morgan's example: 500 chargebacks is 200 over, so USD 1,000 on top of the tier fee.
Three rules do most of the damage.
A clean month does not reset the clock. Months above threshold accumulate until you post three consecutive months under the ECM line. Breach in January, clear February, breach in March, and March is month two. Three clean months closes the audit and returns the counter to one.
Another program can supersede it. Mastercard also runs the Excessive Fraud Merchant program on card-not-present fraud chargebacks. Identified under both, J.P. Morgan says the EFM assessment applies and ECM is suspended until you exit EFM. Moneris adds that after twelve months in either, the higher of the two applies.
The exit is termination. An acquirer facing a merchant deep in HECM has an obvious way to stop paying, and termination for excessive chargebacks is one of the reasons that puts a merchant on Mastercard's MATCH list for five years.
The honest part
These figures come from acquirer and processor reproductions, not from a Mastercard document I read myself. I would rather say so than imply rulebook access I do not have. The three sources agree on thresholds, formula, escalation, and exit, with one exception: Moneris prints USD 25,500 for months seven to eleven where J.P. Morgan and Braintree print USD 25,000. Assume the round number and check with your acquirer.
Thresholds move, and stale ones outlive their accuracy on the open web by years. Braintree dates the ECM thresholds to October 2019 and the fines to April 2020. Stable so far is not permanent.
The bigger caveat is relevance. Most Shopify stores never see 100 Mastercard chargebacks in a month, and for them ECP is not the binding constraint. The acquirer's own internal threshold is, and it usually sits below the network line. Ask what yours is.
Frequently asked questions
What is the Mastercard excessive chargeback threshold?
The Excessive Chargeback Merchant tier requires 100 or more chargebacks in a calendar month and a chargeback-to-transaction ratio of 1.50% or higher. Both conditions must be met at once. The High Excessive tier requires 300 or more chargebacks and a ratio of 3.00% or higher. These figures come from acquirer reproductions of Mastercard's rules (J.P. Morgan, Braintree, and Moneris), checked July 23, 2026.
How is the Mastercard chargeback ratio calculated?
Divide the count of first presentment chargebacks received in the current month by the count of sales processed in the prior month, then multiply by 10,000 to express it in basis points. The one-month offset means a growing store's ratio reads higher than a same-month calculation would suggest.
What is the difference between ECM and HECM?
They are the two tiers of the same program. ECM is the entry tier at 100 chargebacks and 1.50%. HECM is the escalated tier at 300 chargebacks and 3.00%, and it carries roughly double the monthly assessment plus an issuer recovery charge of USD 5 for every chargeback above 300 from month four.
Can you be over Mastercard's threshold and under Visa's VAMP threshold?
Yes, and it is common. Mastercard evaluates any merchant with 100 chargebacks in a month, while Visa's merchant-level program has a floor of 1,500 fraud reports plus disputes. The two programs also use different numerators, different denominators, and different transaction scopes, so the ratios are not comparable numbers.
The calculation to run this month
Divide this month's Mastercard chargeback count by last month's Mastercard sales count and multiply by 10,000. That is the number Mastercard has, and it will not match your dashboard.
Run it back six months and watch whether the gap between the two is widening. If you are growing, it is. Your chargeback ratio is not one number covers the other calculations running in parallel, and Visa's VAMP thresholds for 2026 has the current figures on the other side of the wallet.