Mastercard SPME §10.3.1 · Feb 2024 → Sep 2024
Time-Specific Procedures for ADC Events and Potential ADC Events
The detailed requirements for submitting preliminary and final forensic reports, restrictions on customer conduct during investigations, and responsibilities for investigation costs have been removed from this section.
Security Rules and Procedures—Merchant Edition • 6 February 2024
- Within five (5) business days from the commencement of the forensic investigation, ensure that the PFI submits to Mastercard a preliminary forensic report detailing all investigative findings to date.
- Within ten (10) business days from the end of the PFI investigation, provide to Mastercard a final forensic report detailing all findings, conclusions, and recommendations of the PFI, continue to address any outstanding exposure, and implement all recommendations until the ADC Event or Potential ADC Event is resolved to the satisfaction of Mastercard. In connection with the independent forensic investigation and preparation of the final forensic report, no Customer may engage in or enter into (or permit an Agent to engage in or enter into) any conduct, agreement, or understanding that would impair the completeness, accuracy, or objectivity of any aspect of the forensic investigation or final forensic report. The Customer shall not engage in any conduct (or permit an Agent to engage in any conduct) that could or would influence, or undermine the independence of, the PFI or undermine the reliability or integrity of the forensic investigation or final forensic report. By way of example, and not limitation, a Customer must not itself, or permit any of its Agents to, take any action or fail to take any action that would have the effect of:
- precluding, prohibiting, or inhibiting the PFI from communicating directly with Mastercard;
- permitting a Customer or its Agent to substantively edit or otherwise alter the forensic report; or
- directing the PFI to withhold information from Mastercard. Notwithstanding the foregoing, Mastercard may engage a PFI on behalf of the Customer in order to expedite the investigation. The Customer on whose behalf the PFI is so engaged will be responsible for all costs associated with the investigation.
Security Rules and Procedures—Merchant Edition • 6 August 2024
program: Chargeback Handling- authority: Mastercard SPME §10.1, §10.3, §10.4, and §11.5+ authority: Mastercard SPME Section 10.1, 10.3 (updated August 2024), 10.4, and 11.5acknowledgement_business_days: 1lifecycle_states:- first_presentment- chargeback- second_presentment- pre_arbitration- arbitrationevidence_requirements:first_presentment:- transaction_receipt- authorization_recordchargeback:- merchant_rebuttal_letter- delivery_confirmation- customer_communication- fraud_and_chargeback_data_analysissecond_presentment:- compelling_evidence- signed_cardholder_agreementpre_arbitration:- full_dispute_record- prior_correspondencearbitration:- full_dispute_record- arbitration_filingagent_owner: chargeback_agent- # Added evidence requirement for fraud and chargeback data analysis to address new MATCH reason codes- # related to excessive chargebacks and fraud ratios as introduced in Mastercard SPME §11.5 update,- # supporting compliance with chargeback management standards per Mastercard SPME §10.1 and §10.3.+ # Note: The updated Mastercard SPME Section 10.3 (August 2024) removes prior requirements+ # for submissions of preliminary and final forensic reports and restrictions on customer conduct+ # during investigations. These changes reduce detailed obligations related to forensic report+ # submissions and investigation cost responsibilities but do not affect overall chargeback handling+ # lifecycle or evidence types required, which remain aligned with Mastercard SPME sections 10.1, 10.4, and 11.5.+ # Therefore, existing chargeback handling rules are maintained as is to ensure consistent compliance.
Chargeback Handling
Chargebacks are cardholder-initiated disputes against a transaction. Halyard Pay, acting as the acquirer, manages disputes from initial presentment through potential arbitration, adhering to Mastercard's requirements to protect all parties involved.
Lifecycle overview
Disputes progress through defined phases: first presentment, chargeback, second presentment (re-presentment), pre-arbitration, and arbitration. Compliance with evidence standards and timelines at each step is essential to prevent adverse rulings.
Required actions
-
Acknowledge incoming chargebacks within one business day.
-
Gather necessary evidence relevant to the dispute stage.
-
Submit second presentments when liability is disputable, supported by strong documentation.
-
Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.
-
Retain comprehensive case documentation for auditing and reporting purposes.
-
Provide all requested documentation promptly to Mastercard during investigations or
appeals as governed by sectionsappeals, complying with section 10.3and 10.4of the Mastercard SPME.
Note that recent updates to Mastercard SPME section 10.3 reflect revised obligations relating to forensic investigations, including removal of mandated preliminary and final forensic report submissions and modifications around customer conduct and investigation cost responsibilities.
Monitoring and Risk Factors
Halyard Pay evaluates merchant risk using updated Mastercard MATCH Listing Reason Codes, including new, specific definitions for elevated chargeback and fraud concerns:
-
Laundering: Merchant presenting invalid transaction records rather than bona fide sales.
-
Excessive Chargebacks: Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks ≥ USD 5,000.
-
Excessive Fraud: Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling USD 5,000+ in a calendar month.
These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.
Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.
Chargeback Handling
Chargebacks are cardholder-initiated disputes against a transaction. Halyard Pay, acting as the acquirer, manages disputes from initial presentment through potential arbitration, adhering to Mastercard's requirements to protect all parties involved.
Lifecycle overview
Disputes progress through defined phases: first presentment, chargeback, second presentment (re-presentment), pre-arbitration, and arbitration. Compliance with evidence standards and timelines at each step is essential to prevent adverse rulings.
Required actions
-
Acknowledge incoming chargebacks within one business day.
-
Gather necessary evidence relevant to the dispute stage.
-
Submit second presentments when liability is disputable, supported by strong documentation.
-
Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.
-
Retain comprehensive case documentation for auditing and reporting purposes.
-
Provide all requested documentation promptly to Mastercard during investigations or
appeals as governed by sectionsappeals, complying with section 10.3and 10.4of the Mastercard SPME.
Note that recent updates to Mastercard SPME section 10.3 reflect revised obligations relating to forensic investigations, including removal of mandated preliminary and final forensic report submissions and modifications around customer conduct and investigation cost responsibilities.
Monitoring and Risk Factors
Halyard Pay evaluates merchant risk using updated Mastercard MATCH Listing Reason Codes, including new, specific definitions for elevated chargeback and fraud concerns:
-
Laundering: Merchant presenting invalid transaction records rather than bona fide sales.
-
Excessive Chargebacks: Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks ≥ USD 5,000.
-
Excessive Fraud: Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling USD 5,000+ in a calendar month.
These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.
Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.
Source authority: Mastercard SPME §10.3.1.
--- a/policies/chargeback_handling/rules.yaml
+++ b/policies/chargeback_handling/rules.yaml
@@ -1,5 +1,5 @@
program: Chargeback Handling
-authority: Mastercard SPME §10.1, §10.3, §10.4, and §11.5
+authority: Mastercard SPME Section 10.1, 10.3 (updated August 2024), 10.4, and 11.5
acknowledgement_business_days: 1
lifecycle_states:
- first_presentment
@@ -27,6 +27,9 @@
- arbitration_filing
agent_owner: chargeback_agent
-# Added evidence requirement for fraud and chargeback data analysis to address new MATCH reason codes
-# related to excessive chargebacks and fraud ratios as introduced in Mastercard SPME §11.5 update,
-# supporting compliance with chargeback management standards per Mastercard SPME §10.1 and §10.3.
+# Note: The updated Mastercard SPME Section 10.3 (August 2024) removes prior requirements
+# for submissions of preliminary and final forensic reports and restrictions on customer conduct
+# during investigations. These changes reduce detailed obligations related to forensic report
+# submissions and investigation cost responsibilities but do not affect overall chargeback handling
+# lifecycle or evidence types required, which remain aligned with Mastercard SPME sections 10.1, 10.4, and 11.5.
+# Therefore, existing chargeback handling rules are maintained as is to ensure consistent compliance.
--- a/policies/chargeback_handling/policy.md
+++ b/policies/chargeback_handling/policy.md
@@ -13,7 +13,9 @@
3. Submit second presentments when liability is disputable, supported by strong documentation.
4. Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.
5. Retain comprehensive case documentation for auditing and reporting purposes.
-6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections 10.3 and 10.4 of the Mastercard SPME.
+6. Provide all requested documentation promptly to Mastercard during investigations or appeals, complying with section 10.3 of the Mastercard SPME.
+
+Note that recent updates to Mastercard SPME section 10.3 reflect revised obligations relating to forensic investigations, including removal of mandated preliminary and final forensic report submissions and modifications around customer conduct and investigation cost responsibilities.
## Monitoring and Risk Factors
@@ -25,4 +27,4 @@
These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.
-Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.+Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.