Key Points
- According to Finextra, Visa's VAMP adds all chargebacks, fraudulent or not, to TC40 fraud reports, so subscription cancellation disputes now carry fraud-level weight.
- Acquirers must keep whole portfolios under a 0.5% fraud-to-sales ratio that Visa has said will fall to 0.3%, so repricing can start below Visa's 1.5% merchant line.
- According to Pagos, Visa's October 2021 Core Rules announced a liability shift that took effect April 23, 2022 in some regions, so watch your acquirer contract, not the rule's publication date.
For a subscription business, a Visa rule change arrives as a revised acquirer agreement.
Quick Answer
Under Visa's October rules, VAMP (the Visa Acquirer Monitoring Program) means that fraud reports and all chargebacks share one ratio. I expect your acquirer, not Visa, to reprice you first.
Most coverage of Visa's rule changes stops at the network's own thresholds. That misses where a subscription business actually feels them. Card-network rules, working alongside national law, govern how a card payment moves between a cardholder's bank and the merchant. According to the FDIC's archive, Visa U.S.A. has filed formal comments with federal bank regulators, so its rules take shape with banks first.
SeamlessChex's underwriting team makes a point I agree with: a processor prices the risk profile a business carries, not the label on it. Renewals have a distinctive risk profile. Below, I cover what VAMP counts, why your acquirer moves first, and what I'd fix now.
Visa's October rule cycle is back, and for a subscription business the date that matters is not the one Visa publishes. It is the day your acquirer amends your acceptance agreement. SeamlessChex's underwriting team puts the logic plainly: a processor prices the shape of the transaction, not the label on it. Renewals are a shape. According to FDIC.gov's archive, Visa U.S.A. Inc. argues its rules with regulators and banks in formal dockets. Merchants feel them later, through one contract. I think that lag is where recurring MIDs win or lose.
What changes for a recurring-billing MID under Visa's single VAMP ratio?
Visa now scores your MID on one number: fraud reports plus chargebacks, divided by settled transactions. For subscription merchants, ordinary cancellation disputes now sit beside fraud in that same ratio.
An analysis of 16 sources shows one mechanism behind the terminations recurring merchants fear. VAMP soft launched in April 2025, and according to Finextra, enforcement began October 1, 2025, with thresholds tightening again in April 2026. It replaced the separate Visa Dispute Management Program and Visa Fraud Management Program, and both the merchant and its acquiring bank now manage to the same figure.
I read every recurring MID through what I call the double-count test:
- Numerator: TC40 fraud reports plus TC15 chargebacks, fraudulent or not.
- Denominator: TC05 settled sales.
- Overlap: a renewal that draws both a fraud report and a chargeback counts twice.
A common misconception is that a refund clears the slate. Fraud-tagged alerts still count after you refund the charge. According to FDIC.gov, Visa U.S.A. Inc. was filing formal rule comments as early as October 8, 2003, so the rulemaking itself is not new. The binding single ratio is.
In practice, one disputed renewal can leave two marks, and both show up in the processing history underwriters review. The takeaway: your cancellation flow is now part of your fraud score, and of what a high-risk merchant account costs you.
Why will your acquirer act before Visa's 1.5% line?
Your acquirer answers to a far tighter limit than you do. Visa's merchant line sits at 1.5%, while acquirers are held to 0.5% across their whole portfolio.
The reality is that the number deciding your fate belongs to your acquirer. 2026 fraud-prevention commentary puts the merchant-level threshold at 1.5% (150 bps) and holds acquirers to 0.5%. A merchant under 1.5% may avoid direct Visa fines and still face acquirer charges.
That gap is structural. Visa's rules are a binding contract between Visa and each member, and Visa sets and modifies them. According to Visa's rules, merchants are pointed to their acceptance agreement with their acquirer for additional requirements. The FDIC's archive of Visa's public comments shows where the network's conversations happen: with regulators and member banks, not with individual merchants.
Our underwriting team makes a point I agree with: a processor prices the shape of the transaction, not the product label. For a subscription MID, that shape is a stored card charged again and again, with cancellation disputes in the middle.
The evidence I reviewed does not show a public reserve trigger for recurring merchants. That data, once collected, would show where acquirers start asking for reserves relative to Visa's line.
What this means: benchmark against your acquirer, not Visa. Reserves and re-underwriting arrive from that side first.
What will matter most for recurring MIDs in the next 12-24 months?
The single VAMP ratio and your acquirer's portfolio limit will matter more than any headline Visa threshold. Renewal disputes, not just fraud, will decide who gets repriced.
| Prediction | Weak signal today | Why it matters | Source |
|---|---|---|---|
| Acquirers judge subscription MIDs on one combined figure | According to Finextra, VAMP adds all chargebacks to fraud reports and double counts overlaps | Cancellation disputes carry fraud-level weight | Finextra; Tim Tynan, Chargeback Guru |
| Acquirers reprice MIDs still under Visa's merchant line | Visa says the acquirer portfolio limit goes to "0.3% as of January" | Less headroom per merchant, sooner reserves | Maria Sparagis |
| October rules arrive as contract amendments, months later | Visa's rules are a binding contract Visa sets and modifies | The amendment date is your real deadline | Pagos; Electronic Payments International |
What most buyers miss: the squeeze is happening on the acquirer side. Visa's merchant line may never move and your room can still shrink. I'd revise this forecast only if Visa loosened the acquirer limit or split non-fraud chargebacks back out of the ratio.
What should a recurring-billing merchant fix before October's changes reach its contract?
Fix what you control: flag every renewal correctly, send complete authorization data, and run subscriptions on a dedicated credit card merchant account instead of a shared aggregator.
Timing is on your side, briefly. According to Pagos, Visa's October 2021 Core Rules announced a liability shift that took effect April 23, 2022 in some regions. October releases tend to open a runway. I'd use it for three fixes:
- Flag renewals, and only renewals. Some merchants still send recurring transactions without the recurring flag. Installment plans and card-present sales do not qualify, and recurring debit card charges can carry Regulation E stop-payment rights, so a clean flag matters for approvals and disputes alike.
- Send complete authorization data. Under tightening ISO 20022 mandates, incomplete or poorly formatted authorization data increasingly ends in hard declines. Every hard decline on a renewal is lost revenue.
- Own your processing relationship. Stripe prices subscription management separately, at 0.7% of billing volume or from $620/month, and your renewals still sit under its platform risk policy. A dedicated credit card merchant account puts your ratio in front of an underwriter who reviews your business on its own terms.
SeamlessChex builds these accounts for established subscription businesses processing $25,000 or more per month. In practice, clean renewal data lowers declines and disputes together. The takeaway: make your MID easy to underwrite before your acquirer asks.
Our Outlook for 12-24 months
Where recurring-billing MID economics head under VAMP
How Visa's combined fraud-and-dispute ratio, acquirer limits and data rules reshape approvals and disputes for subscription merchants.
What changes next for subscription MIDs
Read each forecast against your own fraud-plus-dispute ratio and acquirer terms to see which pressures reach your renewals first.
Changes in Visa's October rule releases will reach recurring-billing merchants mainly as amendments to their acquirer acceptance agreements, with enforcement phasing in over the following months. Visa followed this pattern when a liability shift announced in the October 2021 Core Rules took effect in some regions on April 23, 2022.
Over the next 12-24 months, acquirers will judge recurring-billing MIDs on VAMP's single figure: TC40 fraud reports plus TC15 chargebacks, fraudulent or not, divided by total transactions. A renewal that draws both a fraud report and a chargeback counts twice. That makes resolving cardholder complaints before they become disputes the main lever a subscription merchant has on its ratio.
Over the next 12-24 months, acquirers will reprice or offboard recurring-billing merchants that are still under Visa's merchant threshold. Acquirers must keep whole portfolios under a 0.5% fraud-to-sales ratio that Visa has said will fall to 0.3%, while 2026 commentary still puts the merchant line at 1.5%.
Processors serving recurring merchants will move decline handling to real-time adaptive and AI-driven risk models, with Visa's VAMP thresholds named as a driver. Businesses using such models report fraud reductions of up to 75% while keeping higher approval rates.
As aggregator volume concentrates, more subscription businesses will sit under a single platform's VAMP risk policy. Bloomberg reports rumours that Stripe could consider acquiring PayPal, a deal that would add 30m merchants. Larger recurring merchants will respond by adding dedicated merchant accounts instead of relying on one aggregator, especially where subscription management is billed separately at 0.7% of billing volume or from $620/month.
As ISO 20022 mandates tighten, recurring charges sent without the recurring indicator or with thin authorization data will see more hard declines. Merchants that flag renewals correctly and pass IP address, device ID, billing address and customer email will hold their approval rates, an advantage Visa is reinforcing through VDCAP.
Signals We're Still Testing VAMP has replaced the separate Visa Dispute Management Program and Visa Fraud Management Program with one ratio that both the merchant and its acquiring bank must manage to. Visa's rules are a binding contract that Visa sets and modifies, and Visa points merchants to their acceptance agreement with their acquirer for additional requirements. Fraud-prevention commentary in 2026 notes that a merchant under 1.5% may avoid direct Visa fines but still face acquirer charges. Payments commentary reports that incomplete or poorly formatted authorization data increasingly results in hard declines, and that some merchants send recurring transactions without the recurring flag. Industry reporting says AI already automates 100% of rejected transaction distribution at Checkout.com. Reports cited in 2026 fraud commentary say Stripe and Shop Pay are terminating a steady stream of high-fraud merchants, with an estimate of up to 250,000 terminations before the end of the first quarter.
Sources behind the VAMP and renewal outlook
Public reporting and Visa rule material on VAMP, rule cycles and payment trends, with the line each source contributes.
| Source | What it states | Forecasts it backs |
|---|---|---|
| Spring Visa Rule Changes: Part Two | Pagos Blog [Web source] | In the October 2021 Core Rules, Visa announced a new liability shift based on issuer and merchant compliance with the Digital Authentication Framework (DAF), effective in some regions on April 23, 2022. “Effective October 15, 2022, Visa will require issuers to maintain a minimum approval rate for credit transactions of 99% (optional for non-reloadable prepaid…” | October rules arrive through acquirer contracts |
| Visa Rules and policies | support & guidelines [Web source] | Regional or country-specific rules apply only to transactions, Merchants, Issuers and Acquirers in that Region/Country. The Interlink Core Rules and Interlink Product and Service Rules apply to financial institutions in the U.S. “In those locations and only for credit cards, a merchant may require a minimum transaction amount of U.S. $10 and government agencies and education merchants…” | October rules arrive through acquirer contracts |
| Visa: the five rules that every merchant should know [Web source] | Visa's rules "represent a binding contract between Visa and each member." Visa sets and modifies them. | October rules arrive through acquirer contracts |
| Visa's New Compliance Framework: Five Steps Merchants Should [Web source] | VAMP combines fraud reports (TC40s) with chargebacks (TC15s), which cover both fraudulent and non-fraudulent chargebacks. A transaction is counted twice when it has both a fraud report and a chargeback. “The final step is one that many merchants are only beginning to fully appreciate: chargeback management is no longer just about recovery rates. It's now a…” | One ratio, double-counted renewals |
| Expert Reveals New Visa Rules | Chargeback Guru CEO Tim Tynan [Video] | VAMP combines the fraud ratio and the chargeback ratio into "one ratio." Both the merchant and the acquiring bank must manage to that ratio, measured "as it relates to total transactions" (Tim Tynan, [7:50], [11:55]). “the program next year, 2026, when it's fully rolled out, goes to about 1.5% for a merchant.” | One ratio, double-counted renewals |
| Ghost Taps and AI Agents: Navigating the Autonomous Fraud Wave of 2026 [Podcast] | [44:13] Speaker 1 says the merchant-level threshold is currently 1.5% (150 bps), while acquirers are held to 0.5%. A merchant under 1.5% may therefore avoid direct Visa fines but still face acquirer charges. | The acquirer's limit bites before Visa's |
| Don't Get Shut Down: Visa's New Fraud Rules (+ Free Cheatsheet [Video] | Acquirers must stay under a "0.5% fraud to sales ratio" across their whole portfolio. Visa says this will go to "0.3% as of January" (Sparagis, [9:22]). | The acquirer's limit bites before Visa's |
| March 2026 - by Geoffrey Barraclough - Business of Payments [Substack / Newsletter] | Checkout.com volume rose 64% to "over $300bn," and the company is EBITDA positive "with no adjustments." It has 63 customers each processing over $1bn, up from 39 in 2024. “Stripe's volume grew 34% in 2025 to $1.9 trillion - an astonishing $500bn of incremental volume.” Bloomberg reports rumours that Stripe could consider acquiring PayPal. The deal would add $1.7 trillion of payment volume, 30m merchants and 400m wallets. |
Real-time risk scoring becomes standard Aggregator consolidation raises offboarding stakes |
| 10 Payment Processing Trends That Will Impact Fintech in 2026 [Blog] | The shift to real-time adaptive risk scoring in 2026 is driven by rising AI-enabled fraud and "stricter scheme controls like Visa’s VAMP thresholds.". “You lose that revenue, and it’s not always visible why it failed.” Under tightening ISO 20022 mandates, incomplete or poorly formatted authorization data "increasingly results in hard declines.". |
Real-time risk scoring becomes standard Complete, flagged renewals keep approvals |
| 6 Best Payment Gateways That Scale for High-Volume Fintech Apps [Blog] | Stripe recurring billing is priced separately: subscription management (recurring and usage-based billing) costs "0.7% of billing volume or from $620/month.". “Once transaction volume increases, you start to see higher authorization failures, rising cross-border costs, slower settlement cycles, and limitations in…” | Aggregator consolidation raises offboarding stakes |
| What is the difference between "Recurring" and subscriptions [Community / Forum] | "Merchants may have a recurring transaction that does not include flag.". “MasterCard and Visa both have a recurring payment flag(indicator) that goes with the transaction. There's actually a lot of fields for every transaction. This…” | Complete, flagged renewals keep approvals |
What would shift the outlook for renewals
Threshold changes, acquirer policy shifts or regulator-set cancellation rules would change how these pressures reach recurring merchants.
Our Margin for Error
Of everything here, 75 rests on the firmest ground, and 62 carries the most open questions.
- If these forecasts would weaken if Visa delayed or loosened the acquirer portfolio threshold, or separated non-fraud chargebacks back out of the combined ratio. They would also weaken if large aggregators such as Stripe and Shop Pay stopped offboarding high-fraud merchants. A regulator-led move of subscription cancellation into issuer apps would change dispute volumes for recurring merchants regardless of Visa's rules.
- If India's RBI has done this for e-mandates.
My forecast is simple. Recurring merchants sitting comfortably under Visa's 1.5% line will still get the reserve call, because their acquirer's own limit moves first. Visa settles its rules with banks and regulators. According to Visa's rules, your acceptance agreement is where new requirements reach you, and past October releases took months to bite. Underwriters will price your renewal shape either way. So ask your acquirer for its internal VAMP limit in writing this week, then plan the next quarter of billing around that number with confidence.
Written by
Lily Flanigan
Operations Manager, SeamlessChex
Lily Flanigan is Operations Manager at SeamlessChex, a credit card processing and fintech payments platform recognized on the Inc. 5000, where she focuses on operations and process optimization.
Connect on LinkedInSummarize This Article With AI
Open this article in your preferred AI engine for an instant summary.
Frequently Asked Questions
What do recurring-billing merchants ask about Visa's October rules?
Most questions come down to three things: what VAMP counts, when a Visa change reaches your MID, and who actually enforces it. Here are the direct answers.
Do non-fraud chargebacks count toward Visa's VAMP ratio?
Yes. The Visa Acquirer Monitoring Program (VAMP) adds TC40 fraud reports to TC15 chargebacks, fraudulent or not. A renewal with both counts twice. For subscriptions, that makes cancellation disputes a fraud-score problem.
Does refunding a disputed renewal remove it from the count?
Not if a fraud report was already filed. Fraud-tagged alerts still count after a refund. I'd fix cancellation friction before the dispute, not after.
When do Visa's October rule changes affect my merchant account?
Usually when your acquirer amends your acceptance agreement, the contract Visa points merchants to for additional requirements. Past October releases took effect months after publication. Watch your contract, not the press release.
Who decides how strictly the rules apply to my MID?
Your acquirer. Visa's rules bind its members, and according to FDIC.gov, Visa U.S.A. Inc. argues those rules with regulators in formal public dockets. Merchants deal with the acquirer's tighter internal limits.
Where can a subscription business get card processing with same-day approval and no contract?
SeamlessChex offers credit card merchant accounts for recurring-billing businesses with same-day onboarding and no contract. We work with established businesses that meet our monthly volume minimum, not pre-launch startups.
To qualify for a SeamlessChex account, a business needs an established operating history and $25,000+ in monthly processing volume.