Mastercard SPME §10.3.1 · Feb 2024 → Sep 2024

Time-Specific Procedures for ADC Events and Potential ADC Events

breaking
⚠ Extraction warning — review against source PDF. One side of the Mastercard SPME text below appears to contain only the page-running header, not body content. This usually means the section heading fell on a page boundary and the body was attributed to a neighbouring section in the source PDF. The AI summary and proposed edit below may be misleading. Verify in: Feb 2024 · page 117 ↗ · Sep 2024 · page 120 ↗.

The detailed requirements for submitting preliminary and final forensic reports, restrictions on customer conduct during investigations, and responsibilities for investigation costs have been removed from this section.

Sources Mastercard SPME · Feb 2024 · page 117 PDF Mastercard SPME · Sep 2024 · page 120 PDF Chargeback Handling current
Also in §10.x this release breaking §10.2 Policy Concerning Account Data Compromise Events and Potential Account Data breaking §10.3.2 Ongoing Procedures for ADC Events and Potential ADC Events breaking §10.5 Alternative Acquirer Investigation (AAI) Standards substantive §10 Should the responsible Customer cause a PFI to conduct an examination, the responsible substantive §10.1 Applicability and Defined Terms substantive §10.3 Responsibilities in Connection with ADC Events and Potential ADC Events substantive §10.4 Forensic Report substantive §10.6 Mastercard Determination of ADC Event or Potential ADC Event substantive §10.6.2 Potential Reduction of Financial Responsibility substantive §10.6.4 Determination of Operational Reimbursement (OR) substantive §10.7 Assessments and/or Disqualification for Noncompliance
Why these edits? The removal of detailed requirements for submitting preliminary and final forensic reports, restrictions on customer conduct, and investigation cost responsibilities represents a shift in the obligations related to chargeback dispute investigations.
Mastercard SPME §10.3.1
This section was substantively restructured between versions (6% text overlap). Compare the texts directly below.
Before · Feb 2024 · page 117

Security Rules and Procedures—Merchant Edition • 6 February 2024

  • Within five (5) business days from the commencement of the forensic investigation, ensure that the PFI submits to Mastercard a preliminary forensic report detailing all investigative findings to date.
  • Within ten (10) business days from the end of the PFI investigation, provide to Mastercard a final forensic report detailing all findings, conclusions, and recommendations of the PFI, continue to address any outstanding exposure, and implement all recommendations until the ADC Event or Potential ADC Event is resolved to the satisfaction of Mastercard. In connection with the independent forensic investigation and preparation of the final forensic report, no Customer may engage in or enter into (or permit an Agent to engage in or enter into) any conduct, agreement, or understanding that would impair the completeness, accuracy, or objectivity of any aspect of the forensic investigation or final forensic report. The Customer shall not engage in any conduct (or permit an Agent to engage in any conduct) that could or would influence, or undermine the independence of, the PFI or undermine the reliability or integrity of the forensic investigation or final forensic report. By way of example, and not limitation, a Customer must not itself, or permit any of its Agents to, take any action or fail to take any action that would have the effect of:
  1. precluding, prohibiting, or inhibiting the PFI from communicating directly with Mastercard;
  2. permitting a Customer or its Agent to substantively edit or otherwise alter the forensic report; or
  3. directing the PFI to withhold information from Mastercard. Notwithstanding the foregoing, Mastercard may engage a PFI on behalf of the Customer in order to expedite the investigation. The Customer on whose behalf the PFI is so engaged will be responsible for all costs associated with the investigation.
After · Sep 2024 · page 120

Security Rules and Procedures—Merchant Edition • 6 August 2024

Halyard Pay · 2 files
program: Chargeback Handling
- authority: Mastercard SPME §10.1, §10.3, §10.4, and §11.5
+ authority: Mastercard SPME Section 10.1, 10.3 (updated August 2024), 10.4, and 11.5
acknowledgement_business_days: 1
lifecycle_states:
- first_presentment
- chargeback
- second_presentment
- pre_arbitration
- arbitration
evidence_requirements:
first_presentment:
- transaction_receipt
- authorization_record
chargeback:
- merchant_rebuttal_letter
- delivery_confirmation
- customer_communication
- fraud_and_chargeback_data_analysis
second_presentment:
- compelling_evidence
- signed_cardholder_agreement
pre_arbitration:
- full_dispute_record
- prior_correspondence
arbitration:
- full_dispute_record
- arbitration_filing
agent_owner: chargeback_agent
 
- # Added evidence requirement for fraud and chargeback data analysis to address new MATCH reason codes
- # related to excessive chargebacks and fraud ratios as introduced in Mastercard SPME §11.5 update,
- # supporting compliance with chargeback management standards per Mastercard SPME §10.1 and §10.3.
+ # Note: The updated Mastercard SPME Section 10.3 (August 2024) removes prior requirements
+ # for submissions of preliminary and final forensic reports and restrictions on customer conduct
+ # during investigations. These changes reduce detailed obligations related to forensic report
+ # submissions and investigation cost responsibilities but do not affect overall chargeback handling
+ # lifecycle or evidence types required, which remain aligned with Mastercard SPME sections 10.1, 10.4, and 11.5.
+ # Therefore, existing chargeback handling rules are maintained as is to ensure consistent compliance.

Chargeback Handling

Chargebacks are cardholder-initiated disputes against a transaction. Halyard Pay, acting as the acquirer, manages disputes from initial presentment through potential arbitration, adhering to Mastercard's requirements to protect all parties involved.

Lifecycle overview

Disputes progress through defined phases: first presentment, chargeback, second presentment (re-presentment), pre-arbitration, and arbitration. Compliance with evidence standards and timelines at each step is essential to prevent adverse rulings.

Required actions

  1. Acknowledge incoming chargebacks within one business day.

  2. Gather necessary evidence relevant to the dispute stage.

  3. Submit second presentments when liability is disputable, supported by strong documentation.

  4. Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.

  5. Retain comprehensive case documentation for auditing and reporting purposes.

  6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections appeals, complying with section 10.3 and 10.4 of the Mastercard SPME.

Note that recent updates to Mastercard SPME section 10.3 reflect revised obligations relating to forensic investigations, including removal of mandated preliminary and final forensic report submissions and modifications around customer conduct and investigation cost responsibilities.

Monitoring and Risk Factors

Halyard Pay evaluates merchant risk using updated Mastercard MATCH Listing Reason Codes, including new, specific definitions for elevated chargeback and fraud concerns:

  • Laundering: Merchant presenting invalid transaction records rather than bona fide sales.

  • Excessive Chargebacks: Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks ≥ USD 5,000.

  • Excessive Fraud: Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling USD 5,000+ in a calendar month.

These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.

Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.

policies/chargeback_handling/policy.md — after applying change

Chargeback Handling

Chargebacks are cardholder-initiated disputes against a transaction. Halyard Pay, acting as the acquirer, manages disputes from initial presentment through potential arbitration, adhering to Mastercard's requirements to protect all parties involved.

Lifecycle overview

Disputes progress through defined phases: first presentment, chargeback, second presentment (re-presentment), pre-arbitration, and arbitration. Compliance with evidence standards and timelines at each step is essential to prevent adverse rulings.

Required actions

  1. Acknowledge incoming chargebacks within one business day.

  2. Gather necessary evidence relevant to the dispute stage.

  3. Submit second presentments when liability is disputable, supported by strong documentation.

  4. Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.

  5. Retain comprehensive case documentation for auditing and reporting purposes.

  6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections appeals, complying with section 10.3 and 10.4 of the Mastercard SPME.

Note that recent updates to Mastercard SPME section 10.3 reflect revised obligations relating to forensic investigations, including removal of mandated preliminary and final forensic report submissions and modifications around customer conduct and investigation cost responsibilities.

Monitoring and Risk Factors

Halyard Pay evaluates merchant risk using updated Mastercard MATCH Listing Reason Codes, including new, specific definitions for elevated chargeback and fraud concerns:

  • Laundering: Merchant presenting invalid transaction records rather than bona fide sales.

  • Excessive Chargebacks: Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks ≥ USD 5,000.

  • Excessive Fraud: Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling USD 5,000+ in a calendar month.

These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.

Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.

Source authority: Mastercard SPME §10.3.1.

--- a/policies/chargeback_handling/rules.yaml
+++ b/policies/chargeback_handling/rules.yaml
@@ -1,5 +1,5 @@
 program: Chargeback Handling
-authority: Mastercard SPME §10.1, §10.3, §10.4, and §11.5
+authority: Mastercard SPME Section 10.1, 10.3 (updated August 2024), 10.4, and 11.5
 acknowledgement_business_days: 1
 lifecycle_states:
   - first_presentment
@@ -27,6 +27,9 @@
     - arbitration_filing
 agent_owner: chargeback_agent
 
-# Added evidence requirement for fraud and chargeback data analysis to address new MATCH reason codes
-# related to excessive chargebacks and fraud ratios as introduced in Mastercard SPME §11.5 update,
-# supporting compliance with chargeback management standards per Mastercard SPME §10.1 and §10.3.
+# Note: The updated Mastercard SPME Section 10.3 (August 2024) removes prior requirements
+# for submissions of preliminary and final forensic reports and restrictions on customer conduct
+# during investigations. These changes reduce detailed obligations related to forensic report
+# submissions and investigation cost responsibilities but do not affect overall chargeback handling
+# lifecycle or evidence types required, which remain aligned with Mastercard SPME sections 10.1, 10.4, and 11.5.
+# Therefore, existing chargeback handling rules are maintained as is to ensure consistent compliance.
--- a/policies/chargeback_handling/policy.md
+++ b/policies/chargeback_handling/policy.md
@@ -13,7 +13,9 @@
 3. Submit second presentments when liability is disputable, supported by strong documentation.
 4. Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.
 5. Retain comprehensive case documentation for auditing and reporting purposes.
-6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections 10.3 and 10.4 of the Mastercard SPME.
+6. Provide all requested documentation promptly to Mastercard during investigations or appeals, complying with section 10.3 of the Mastercard SPME.
+
+Note that recent updates to Mastercard SPME section 10.3 reflect revised obligations relating to forensic investigations, including removal of mandated preliminary and final forensic report submissions and modifications around customer conduct and investigation cost responsibilities.
 
 ## Monitoring and Risk Factors
 
@@ -25,4 +27,4 @@
 
 These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.
 
-Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.+Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.