Friendly fraud in iGaming starts the same way every time. A player deposits $300, plays for an hour, and loses. Two weeks later, your acquirer sends a notice. The cardholder says they never authorised the charge.
That is the cost of friendly fraud. It looks like theft, but the cardholder is a real customer. As a result, it hurts more than ordinary fraud, because the player already used your product.
This guide shows you how to fight back. You will learn which evidence wins. You will also see how Visa and Mastercard rules work in 2026. Finally, you will learn how to set up your merchant account so disputes stay low. Whether you run a casino, a sportsbook or a social gaming app, the same playbook applies.
| QUICK ANSWER Friendly fraud in iGaming happens when a real player disputes a valid deposit, usually after losing. You win by proving the player made the deposit. Under Visa Compelling Evidence 3.0, match the IP address or device ID, plus one more data point. Use two earlier undisputed deposits made 120 to 365 days before the dispute. Add KYC, login, gameplay and withdrawal logs. Then respond before the deadline. |
What Is Friendly Fraud in iGaming?
Friendly fraud, also called first-party misuse, happens when a cardholder disputes a valid purchase. In gaming, the player funds an account, uses the service, and then tells the bank the deposit was unauthorised.
The intent varies. Some players act on purpose. Others forget a charge or panic over a slow withdrawal. However, the card networks treat every case the same way. The dispute lands as a fraud claim, and you must prove it wrong.
Three patterns appear again and again in casinos and sportsbooks:
- Bet-regret disputes. The player loses, then claims the deposit was unauthorised.
- Unrecognised charges. The billing descriptor shows a parent company name, so the player does not know the charge.
- Household use. A partner, child or friend uses the stored card, and the cardholder disputes it.
How Big Is the Problem?
Estimates differ by source and by method. Visa puts first-party misuse at about 20% of fraudulent disputes worldwide, and up to 30% for high-volume online merchants. Other studies report far higher shares of total chargebacks. For example, the Chargebacks911 2026 Field Report found that friendly fraud made up 43.8% of chargebacks among its merchant respondents.
Meanwhile, the Merchant Risk Council reports that 64% of merchants see first-party misuse rising. Mastercard also warns that global chargeback costs could reach $42 billion by 2028. The takeaway is simple. Friendly fraud is common, growing and costly.
Why iGaming Merchants Face More Friendly Fraud Than Most?
Gaming has features that raise dispute risk. First, the product is digital and instant. Players use it in minutes, so there is nothing to ship or track. Second, the emotional stakes are high. A loss can trigger a dispute, even from a player who enjoyed the session.
Third, networks watch gaming closely. Merchant category code 7995 draws tougher scrutiny from issuers and acquirers, so MCC 7995 chargebacks carry extra weight. Finally, stored-card and one-click deposits often skip 3D Secure. That removes a layer of proof.
The stakes also rose in 2026. Visa lowered the merchant “Excessive” threshold in its VAMP program from 2.2% to 1.5% on April 1, 2026. The change covers the US, Canada, the EU, Asia Pacific and Latin America. Merchants in CEMEA stay at 2.2%.
VAMP counts both fraud reports and disputes against settled transactions. Therefore, a gaming merchant with a modest chargeback rate can still cross the line. Your VAMP ratio for gaming merchants deserves a monthly check.
| Program | Excessive threshold (2026) | What it counts |
| Visa VAMP (merchant) | 1.5% (2.2% in CEMEA), with an $8 fee per disputed card-not-present transaction | Fraud reports (TC40) plus disputes (TC15), divided by settled transactions |
| Mastercard ECM | 1.5% ratio plus 100 or more chargebacks in a month | Chargebacks against transactions |
| Mastercard HECM | 3% ratio plus 300 or more chargebacks | Chargebacks against transactions |
Thresholds change. Confirm current figures with your acquirer.
Acquirers often apply stricter internal limits to gaming portfolios. As a result, you may face action before you reach the public thresholds. Ask your acquirer for its internal limits in writing.
How a Friendly Fraud Chargeback Dispute Works?
Knowing the flow helps you plan your evidence. The process follows five stages:
- First, the player contacts the issuing bank and disputes the charge.
- The issuer files a chargeback under a reason code. Visa uses 10.4 for card-absent fraud claims.
- Your acquirer notifies you and sets a response deadline.
- You submit a representment, which is a rebuttal backed by evidence.
- The issuer accepts your evidence or escalates to pre-arbitration.
Deadlines are short and differ by network and acquirer. So build your evidence file before disputes arrive, not after.
The Evidence That Wins Friendly Fraud Disputes
Issuers do not judge intent. They judge proof. Your goal is to show that the cardholder, or someone they allowed, made the deposit. Layer several types of online casino chargeback evidence, because no single item wins every case.
| Evidence | What it proves | Where to capture it |
| Device ID and IP logs | The same device and network made earlier undisputed deposits | Every deposit, login and withdrawal session |
| Account and login history | The cardholder used the account over time | Platform database |
| KYC and age verification | The verified identity matches the cardholder | KYC provider records |
| 3D Secure result | The cardholder authenticated the payment | Payment gateway |
| Gameplay and bet logs | The player used the service after depositing | Game and wallet servers |
| Withdrawal history | The player took funds out of the account | Wallet and cashier logs |
| Terms and consent record | The player accepted the terms and stored-card agreement | Signup and cashier flow |
| Support tickets and emails | The player contacted you about the account or charge | Helpdesk and email archive |
| Geolocation checks | The player played from an allowed location | Geolocation provider |
Device ID and IP data carry the most weight, because Visa’s Compelling Evidence 3.0 rules require one of them. Chargeback Gurus also notes that missing IP, device ID and AVS data limits representment in gaming. So capture them on every deposit, login and withdrawal.
Visa Compelling Evidence 3.0 for Casinos and Sportsbooks
Compelling Evidence 3.0 (CE 3.0) is Visa’s strongest tool against friendly fraud. It applies to reason code 10.4, the card-absent fraud claim. To qualify, you must show four things:
- Two earlier transactions on the same card, with no fraud report or dispute against them.
- Both transactions dated 120 to 365 days before the disputed one.
- At least two matching data elements across all three transactions: user ID, IP address, shipping address or device ID.
- One of those matches must be the IP address or the device ID.
Active gaming accounts meet the history rule easily. Players deposit often, so many earlier deposits sit inside that window. The harder part is the data. Gaming has no delivery address, so the natural pair is device ID plus account ID.
Many casinos also store cards for one-click deposits. Those deposits often skip 3D Secure, so Visa’s automatic qualification through Visa Secure may not apply. In that case, you must build the CE 3.0 case yourself from your own logs. This is the core of casino chargeback representment today.
Visa keeps widening the rule. According to Chargeflow, CE 3.0 began covering undisputed fraud reports on April 18, 2026. Visa is also set to allow evidence from multiple merchants for 10.4 disputes from October 24, 2026. Confirm both changes with your acquirer, because rollout details vary.
Finally, keep your records for at least 13 months. That covers the 365-day window plus your response time.
Mastercard First-Party Trust: The Other Network
Mastercard runs its own program. First-Party Trust lets merchants share purchase history, device and identity details, delivery records and location data. You can share it at authorisation or after a dispute.
Mastercard has extended the program from the US to Canada, Latin America, the Caribbean and Asia Pacific. Merchants that meet the data-sharing rules may qualify for chargeback protection. So ask your processor whether it supports First-Party Trust submissions.
A 7-Step Representment Playbook for Gaming Merchants
- Sort disputes by reason code. Separate 10.4 fraud claims from service or refund disputes.
- Decide what to fight. Each dispute counts as one unit in your VAMP ratio, whatever its size. So winning small cases still helps.
- Pull the account file. Export the full timeline: registration, KYC, deposits, bets, logins and withdrawals.
- Match the data. Line up device ID, IP and user ID against earlier undisputed deposits.
- Write a clear narrative. Keep it factual and under one page. Lead with your strongest proof.
- Submit on time. File through your acquirer before the deadline, with every exhibit labelled.
- Track and learn. Record outcomes by reason code, then fix the gap behind each loss.
What a Strong Narrative Says?
Here is an illustrative example. “The player registered on 3 March and passed ID and age checks on 4 March. Between March and August, the player made 14 deposits from the same device and IP address. The disputed deposit came from that device. The player then played for 52 minutes and withdrew $120 on 2 September.”
Notice the tone. It states facts, dates and matches. It does not argue or accuse.
Stop Disputes Before They Start
Winning is good. Preventing is cheaper. These steps cut friendly fraud before it reaches your acquirer:
- Use a clear billing descriptor. Match it to the brand name players see on your site.
- Run 3D Secure on risky deposits. It adds proof that the cardholder authenticated.
- Join deflection programs. Tools such as Visa RDR, Verifi CDRN and Ethoca alerts can resolve a dispute before it becomes a chargeback. Disputes resolved this way are not counted in your VAMP ratio.
- Pay out fast. Slow withdrawals push worried players toward their bank.
- Answer support quickly. A fast reply often stops a dispute before it starts.
- Offer deposit limits and self-exclusion. Strong player protection reduces regret-driven claims.
For a deeper prevention checklist, read our guide on how to reduce chargebacks on a casino merchant account.
Why Your Offshore Casino Merchant Account Shapes Your Dispute Outcomes?
Your merchant account sets the rules you fight under. An offshore casino merchant account lets licensed operators serve international players. Even so, acquirers watch dispute ratios closely.
High ratios can lead to rolling reserves, higher fees or termination. Extended time above the Excessive line can also lead to a MATCH listing. That listing makes it hard to open a new account. Therefore, dispute performance is a business-survival metric, not just a finance metric.
A strong high risk merchant account for casino operators should include dispute tooling. Look for evidence capture, chargeback alerts, representment support and backup acquirers. Chargeback protection for online casinos works best when your provider builds it into the account.
How to Get a Gaming Merchant Account With a Strong Dispute Profile?
Underwriters judge your dispute readiness before they approve you. So if you wonder how to get a gaming merchant account, start by preparing these items:
- A valid gaming licence for your target markets, such as Curaçao, Malta or another recognised regulator.
- Company and beneficial-owner KYC documents.
- Processing history with chargeback and refund ratios, if you have it.
- A written AML, KYC and responsible gambling policy.
- Website basics: clear terms, a refund policy, an age gate and the correct descriptor.
- A chargeback plan covering 3D Secure, device capture, alerts and evidence retention.
- Projected monthly volume and average deposit size.
Underwriters generally see a documented dispute plan as a sign of lower risk. Start early, because approval takes time. Do not wait until launch week.
Compliance and Data Handling Notes
Capturing device and IP data must follow your licence and local data-protection laws, such as the GDPR. Update your privacy notice, set retention rules, and limit who can access evidence files.
Also remember that rules differ by country. Several markets restrict real-money online gaming payments. So confirm local law and your licence terms before you process in any market.
Key Takeaways
- Friendly fraud in iGaming is a real player disputing a valid deposit, often after a loss.
- Visa CE 3.0 needs two earlier undisputed deposits, 120 to 365 days old, with two matching data points.
- One of those matches must be the IP address or the device ID.
- Stored-card deposits often skip 3D Secure, so your own device and IP logs matter most.
- Visa’s merchant Excessive threshold fell to 1.5% on April 1, 2026, so every dispute counts.
- Prevention tools and a specialist merchant account lower both disputes and risk.
FAQs: Friendly Fraud in iGaming
What is friendly fraud in iGaming?
Friendly fraud in iGaming happens when a real player disputes a valid deposit with their bank. The player often claims the charge was unauthorised after a loss. Card networks call it first-party misuse.
Can a casino win a chargeback from a player who lost?
Yes. A casino can win when it proves the player authorised the deposit. Strong device, IP, KYC, login and gameplay evidence improves the odds. Results depend on evidence quality and the reason code.
What evidence do I need under Visa CE 3.0?
You need two earlier undisputed transactions on the same card, dated 120 to 365 days before the dispute. At least two data elements must match across all three transactions. One match must be the IP address or the device ID.
Does 3D Secure stop friendly fraud?
Not fully. 3D Secure shifts liability for true fraud to the issuer. For friendly fraud, it gives strong supporting evidence, but it is not a guaranteed defence.
How does friendly fraud affect my merchant account?
Disputes raise your VAMP and chargeback ratios. Visa’s merchant Excessive threshold is 1.5% from April 1, 2026 in most regions. High ratios can bring fines, rolling reserves or account termination.
How do I get a gaming merchant account if I have past chargebacks?
Work with a specialist high-risk provider. Share your chargeback history, explain what changed, and show your prevention and evidence tools. Add your licence, KYC documents and compliance policies to the application.
Build a Merchant Account That Fights Friendly Fraud With You
Friendly fraud will not disappear. However, you can win more disputes and prevent many more with the right evidence and the right partner. DozyPay helps gaming merchants secure a casino merchant account and payment gateway built for high-risk play. Talk to DozyPay about a setup that fits your dispute profile.
