Friendly fraud: how to spot it, fight it, and stop it

Friendly fraud is when the person who owns a card disputes a purchase that they, or someone in their household, really made. Visa describes it as a cardholder disputing a legitimate transaction that they made or someone in their household made, and it also uses the more formal name, first-party misuse. Nobody stole the card. The order went through, the goods arrived or the service happened, and then the money left your account as a chargeback.

It costs more than the sale. Visa says first-party misuse can cost merchants up to double the original transaction amount. Add up the sale you lose, the goods you don't get back, and the fee, and it's easy to see how.

This guide sticks to friendly fraud: why customers do it, how to tell it apart from stolen-card fraud, the evidence that wins, and how to stop it before it's filed. For the dispute process itself, read how a chargeback works. For fixes to every type of chargeback, see how to prevent chargebacks. Rules here are current as of October 2026.

What is friendly fraud, and how is it different from real fraud?

Friendly fraud sits between two other kinds of disputes. With true fraud, a criminal uses stolen card details. With a legitimate dispute, the customer really didn't get what they paid for. Friendly fraud can look like either one on paper, but the cardholder got exactly what they paid for.

Nothing on a chargeback notice says "friendly." The dispute arrives with an ordinary reason code: a fraud code such as Visa's 10.4 (Other Fraud, Card-Absent Environment), a "not received" code, or a "not as described" code. You work out that it's friendly fraud from your own records, which is why the records matter so much.

Why do customers commit friendly fraud?

Most friendly fraud starts with confusion, not a plan. Visa's friendly fraud explainer names three common causes. Two more are worth adding, because you can fix them.

1. Someone else in the house bought it. Visa points to household misuse, such as a family member using a saved card without the cardholder's full awareness. The parent sees a game purchase they didn't make and assumes the card was stolen.
2. The charge doesn't look familiar. Visa also lists confusion over a merchant's name or billing descriptor. If your statement name is a holding company or a clipped legal name, a real customer may not connect it to you. Our guide to the billing descriptor shows clearer ones.
3. They want the goods and the money. Visa describes intentional cases where a cardholder disputes a legitimate purchase to get a refund while keeping the goods or services.
4. They forgot. A free trial converted, a membership renewed, or a deposit was charged weeks before the work started.
5. The bank felt easier than you. If your refund policy is hard to find or your support inbox is slow, the dispute button in a banking app looks like the faster route.

Only the third is fraud in the everyday sense. The rest are communication problems, and treating those customers like criminals usually costs you the customer along with the dispute. There's good news in that list, though: four of the five causes are things you control. Our page on chargeback management for small businesses groups fixes like these by cause.

How do you tell friendly fraud from true fraud?

Look at what happened after the sale. A real customer leaves a trail: an account login, earlier orders, delivery to their own address, an email to your support team. Stolen card details rarely come with any of that. Check these signals before you decide how to respond.

One signal proves little. Three or four together make a strong case, and they happen to be the same data Visa's evidence rules ask for. If most of your disputes look like the right-hand column instead, your problem is stolen cards, and our guide to card-not-present transactions covers the screening that helps.

What evidence wins a friendly fraud chargeback?

Match your evidence to the reason code on the notice, not to your suspicion. A fraud claim needs proof that the cardholder made the purchase. A "not received" claim needs proof of delivery. Telling the issuer the customer is lying, without documents, gets you nowhere.

Fraud claims: Visa Compelling Evidence 3.0

Visa's Compelling Evidence 3.0 rules took effect in April 2023 and were written for exactly this situation. If the same cardholder made earlier purchases with you that weren't disputed, and the data matches, Visa treats a 10.4 fraud dispute as invalid. Visa's acquirer FAQ asks for at least two matching data elements from this list: customer login ID, delivery address, device ID or fingerprint, and IP address. At least one has to be the device ID, device fingerprint, or IP address.

The earlier purchases also have to fall in a window. Visa's dispute guide says they must have settled 120 to 365 days before the dispute.

Here's how that plays out. Say an outdoor gear shop in Seattle gets a 10.4 dispute on October 20, 2026, for a $420 jacket. The customer's account shows two earlier orders, and neither was disputed:

• January 10, 2026: 283 days before the dispute, inside the window.
• March 5, 2026: 229 days before the dispute, also inside.
• A June 30 order wouldn't count. It's only 112 days back, short of the 120-day minimum.

All three orders came from the same laptop and shipped to the same address. That's two matching elements, and one of them is the device, so the shop has what Visa's rules ask for. The hard part happened months earlier: the shop could only produce those records because its checkout saved device and IP data on every order. Mastercard's advice points the same way. For card-not-present fraud claims, merchants can submit the IP address of the device used for the purchase.

Other friendly fraud claims

For "not as described" claims, Visa tells merchants to address each point the cardholder has made, so answer the complaint line by line. For subscriptions, our guide to recurring billing covers the consent records worth keeping.

Take a fitness studio in Miami that sells 10-class packs online. A member books and attends seven classes, then disputes the purchase as unauthorized. The studio's booking system shows each check-in with a date, all on the member's own account. That attendance log is the whole case. Our wellness and fitness page covers payment setups for studios like this one.

Is it worth fighting a friendly fraud chargeback?

Fight when you have documents that answer the specific claim and the amount justifies the time. Accept the rest, and spend the time on prevention instead.

Here's the math on one case. An online shop sells a $180 order and later gets a friendly fraud dispute. Its processor charges a chargeback fee; we'll use $25 for this example, though your merchant agreement sets the real amount.

• Accept it: the $180 leaves your account, the customer keeps the goods, and you pay the $25 fee. You're $205 worse off than the sale you thought you'd made.
• Fight and win: the $180 comes back. Whether the $25 fee comes back depends on your agreement, so ask. Budget 30 to 60 minutes of someone's time to pull records.
• Fight and lose: you're out the same $205, plus the time.

At $180, with a CE 3.0 match or signed delivery, fighting is worth it. At $18 with thin records, it isn't. Visa's guide makes the same point from the other side: accepting a dispute can save time and expense.

Winning also isn't the whole story. Visa's monitoring ratio is built from the number of fraud reports and disputes, and the disputes it leaves out are those resolved through pre-dispute solutions. A chargeback you win was still filed. That's the best argument for stopping friendly fraud before it becomes a chargeback at all.

How do you prevent friendly fraud?

Prevention here is mostly about being easy to recognize and easy to reach. Fraud filters won't do much: AVS, CVV2, and velocity rules are built to stop stolen cards, and in friendly fraud the real cardholder passes every one of them. Clearo's online payments include those checks, and you should run them, but they're the wrong tool for this job. These are the right ones.

1. Make the charge recognizable. Visa says the acquirer should submit the name most prominently displayed by the merchant, the one cardholders know. Our prevention guide explains how to test yours.
2. Make a refund easier than a dispute. Put a refund link and a contact email in every receipt, and answer within one business day. Visa's guide advises merchants to act promptly and issue a credit when a customer with a valid complaint gets in touch.
3. Name the charge in your emails. Order confirmations and shipping notices should show the amount and the exact name that will appear on the card statement.
4. Remind before you renew. Send a notice before a trial converts or a membership renews, with a simple way to cancel.
5. Share order details before a dispute starts. Visa's Order Insight shares order details with issuers so they can clear up confusion about a legitimate charge, and an April 2026 update lets merchants use Compelling Evidence 3.0 within it.
6. Save evidence by default. Log the login ID, IP address, device ID, and delivery address for every order, and keep delivery photos.
7. Lock down saved cards. For digital goods, ask for a password or PIN before a purchase on a saved card, so a child with the family tablet can't buy with one tap.

Ask your processor which of Visa's pre-dispute tools you can use. Rapid Dispute Resolution, for example, can refund a cardholder automatically in the pre-dispute stage, so a small claim never turns into a chargeback. In one Visa case study, the sample rule was to always refund disputes under $40. If you'd rather judge each case yourself, chargeback alerts give you a window to refund before the bank files a chargeback.

A friendly fraud checklist

1. Log every dispute with its reason code, amount, and whether the customer had ordered before.
2. Check each fraud dispute for a CE 3.0 match before you accept it.
3. Save device ID, IP address, login, and delivery address on every online order.
4. Get delivery confirmation, with a signature or photo, on orders above a dollar amount you choose.
5. Show your refund policy before checkout and in every receipt.
6. Confirm your statement descriptor by buying from your own business.
7. Send renewal and trial-ending reminders.
8. Decide in advance which disputes you'll accept without a fight, and stick to it.
9. Stop taking orders from a customer who files a second dispute you can disprove.

When a customer has a real complaint, the cheaper path is usually to refund before they reach their bank. Our guide to chargeback vs refund runs the numbers. These are card network rules rather than state laws, so they work the same way whether you sell from Seattle or anywhere else in the United States.

Next step

If you don't keep a dispute log yet, start one this week. It's the quickest way to see how much of your chargeback problem is friendly fraud. Clearo's payment processing comes with chargeback management tools, and every client has a dedicated rep to call when a notice arrives. If you'd like to see what disputes cost you now, send us a recent statement for a free statement review, or contact us to talk through your setup.