Have you heard the news? Visa is releasing an important update to its fraud and digital monitoring programs with the launch of the newest evolution of the Visa Acquirer Monitoring Program (VAMP).
Starting April 1, 2025, this new framework will consolidate and replace the existing VFMP (Visa Fraud Monitoring Program) and VDMP (Visa Dispute Monitoring Program) programs that will impact merchants directly. For merchants around the world, these changes bring new compliance metrics and stricter threshold updates for disputes — making it more important than ever before to stay ahead of fraud, chargebacks, and card testing.
In this article, we’ll break down the changes you can expect with VAMP, the direct impact it will have on merchants, and how you can best prepare.
VAMP: What’s Changing?
All in all, the updated VAMP program will introduce new compliance metrics and stricter monitoring requirements aimed at reducing enumeration attacks (automated trial-and-error attacks, specifically card testing in the context of VAMP), preventing fraud attacks, and the ability to effectively manage disputes.
Here’s what you need to know:
Consolidated Monitoring: VAMP combines Visa’s previous fraud and dispute programs (VFMP and VDMP) into a single framework.
New Compliance Metrics: VAMP will use two key ratios when it comes to monitoring compliance.
VAMP Ratio: A new metric combining both fraud and non-fraud disputes (fraud disputes and non-fraud disputes divided by total settled transactions).
Enumeration Ratio: A metric previously unrequired for merchants to be evaluated on, this tracks card testing (enumerated attacks divided by total sales).
Merchant Fees: Fines for exceeding the following thresholds will occur on each dispute. $10 per card-absent fraud and dispute non-fraud.
In the new VAMP program, Visa will be able to better evaluate non-compliance by introducing a three-month grace period for first-time identifications. This means that if a merchant exceeds Visa’s VAMP thresholds, they will have a three-month grace period to make adjustments without incurring penalties. Starting with the fourth month, the merchant will be responsible for enforcement fees on each dispute (fraud and non-fraud) when exceeding the specified thresholds.
Important Timeframes: VAMP introduces tighter thresholds for both acquirers and merchants, with updates taking effect as early as this Spring.
April 1, 2025: The three-month advisory period starts. During this time, any acquirers or merchants who exceed VAMP thresholds will be notified if their activity would trigger potential enforcement actions. However, no penalties will be applied during the advisory period to provide time for making risk management adjustments.
July 1, 2025: The enforcement period begins. After the 3-month advisory period runs its course, VAMP enforcement will officially begin in July.
January 1, 2026: VAMP thresholds are lowered. VAMP ratio thresholds update to become more strict for acquirers and merchants.
VAMP’s Direct Impact on Merchants
The implications of VAMP for merchants are significant, and understanding these changes is crucial to avoiding penalties and maintaining smooth operations:
New Metrics to Track: Merchants must monitor their VAMP Ratio and Enumeration Ratio closely.
Heightened Focus on Card Testing: Enumeration attacks (rapid, automated attempts to validate card details) are a growing concern, and merchants must put measures in place to prevent these attacks.
Stricter Acquirer Requirements: Acquirers have even lower thresholds for their portfolio than merchants, which means they’ll likely impose stricter controls to avoid their own penalties.
Risk of Fees: If you exceed VAMP thresholds beyond the grace period, you’ll face fees on every dispute.
Preparing for VAMP: Best Practices & Next Steps
To stay ahead of these changes and minimize risk, merchants should take proactive steps to strengthen their fraud prevention and dispute management strategies. Here’s how Forter can help make sure you are prepared as a merchant:
Leverage Pre-Authorization Fraud Detection: Blocking fraudulent transactions before they reach the acquirer reduces the risk of enumeration attacks and protects your Enumeration Ratio.
Optimize 3DS Usage: Applying blanket 3DS to all transactions is not recommended as it will reduce conversions. Applying Smart 3DS helps shift liability for certain transactions, excluding them from your VAMP ratio and reducing your dispute count without impacting your conversions.
Prevent Non-Fraud Chargebacks: Disputes around processing errors, service issues, and customer complaints are part of the VAMP ratio. Implementing robust customer communication and abuse prevention can minimize these non-fraud disputes.
Leverage Holistic Fraud Prevention: Forter’s Trust Platform provides best-in-class fraud detection and dispute management, helping you avoid entry into VAMP and stay compliant with Visa’s evolving requirements.
As Visa raises the standard for dispute and fraud monitoring, merchants need a trusted partner who can help them navigate these changes with confidence and foresight. With Forter’s comprehensive Trust Platform, you can ensure your business stays below VAMP thresholds by minimizing fraud, disputes, and card testing – helping you deliver a great customer experience while protecting your business’ margins.
