Chargebacks for Small Businesses: How They Work and How to Answer One

A chargeback is the one hit on your statement where the money leaves before anybody asks your side.

A customer tells their bank they don't recognize a charge, or the order never showed. The bank pulls the money back. Then you get a notice asking if you want to fight it. By then the sale is gone from your deposits, and there's usually a fee on top.

Here's how it works, what wins, and how to see fewer of them.

What a chargeback is

A chargeback is a reversal the customer's bank pushes through the card network. A refund is you giving money back. A chargeback is the bank taking it, and you find out after.

The path: the customer disputes with the bank that issued their card. That bank sends it through the network to your processor's side. Your processor pulls the amount and tells you. If you respond with evidence, it goes back up the same chain, and the card-issuing bank decides.

Most disputes land in one of three buckets:

• Fraud. "I didn't make this purchase."
• Processing errors. Charged twice, wrong amount, a sale that wasn't properly approved.
• Customer disputes. Never got it, not as described, canceled but still billed, refund promised and never showed.

The bucket matters. Evidence that wins one type does nothing for another.

The clock

Two clocks run on every chargeback, and the customer's is a lot longer than yours.

Under the card network rules, a customer generally has around 120 days from the transaction to dispute it on Visa and Mastercard. Some reasons get less time. Some get more, especially when the clock starts from the date the customer expected the goods or service, like a prepaid order or an event months out. So a sale from the spring can come back on you in the fall.

You get nowhere near that. Once a dispute lands, the network gives your processor a set window to respond, and your processor gives you a shorter one so it has time to file. Miss it and you lose by default.

There's also a federal route. Under the Fair Credit Billing Act, a credit card customer can send their bank a written billing-error notice within 60 days after the statement showing the charge went out. That's separate from a network chargeback, but it's one more way a customer can contest a charge.

The practical part: the deadline on your processor's notice is the only date that matters to you. Open every letter and email from your processor the day it shows up.

Friendly fraud

This is the one that makes owners nuts. The customer made the purchase, got the goods, and disputed it anyway.

Sometimes it's on purpose. Plenty of times they forgot, didn't recognize the name on their statement, or their kid used the card. To the bank it looks like any other dispute, and it's on you to show the customer was really there.

For card-not-present fraud disputes, Visa added a rule in April 2023 called Compelling Evidence 3.0. If you can show two earlier purchases from the same customer, made 120 to 365 days before the dispute, never disputed or reported as fraud, that match the disputed sale on at least two data points, the bank can end up holding the bag instead of you. The data points include IP address, device ID, customer login, and shipping address. One of the two matches has to be the IP address or device ID.

That only helps if your checkout saves that data. Ask whoever runs your site whether it does.

What evidence wins

Match the evidence to the reason. A stack of paper that doesn't answer the actual claim loses.

• "I didn't make this purchase," in person: the receipt, proof the card was dipped or tapped, and anything else that ties the customer to the sale.
• "I didn't make this purchase," online or by phone: billing and shipping address match, IP address or device, the customer's order history, emails or texts with them, delivery to their address.
• "I never got it": tracking with delivery confirmation, a signature on big tickets, or proof the service happened, like a booking record or photos of the finished job.
• "Not as described" or "I canceled": your refund and cancellation policy, proof the customer saw it at checkout, and every message back and forth.
• "My refund never came": the refund record. If you already refunded, this should be the easiest one you ever win.

Keep it tight: a one-page cover letter saying what was sold, when, to whom, and why the claim doesn't hold. Then the proof.

Holds, reserves, and fees

The disputed sale is only part of what a chargeback costs you.

Your processor probably charges a fee for each chargeback. In a lot of agreements it applies whether you win or lose. Check yours.

Then there's risk. A run of chargebacks, or a sudden jump in volume, can get your account flagged. Your processor may hold deposits or put you on a reserve, keeping back part of your sales for a while to cover future disputes. The terms are in the reserve section of your merchant agreement, usually buried. If you get put on one, get the release date and terms in writing.

Above your processor, the networks watch the numbers too. Visa rolled its fraud and dispute monitoring into one program, the Visa Acquirer Monitoring Program. Mastercard runs an Excessive Chargeback Program. Land in one and your processor faces penalties, which tend to roll downhill to you.

Prevention that works

A lot of preventable chargebacks start with a confused customer.

Fix your descriptor. That's the name that shows up on your customer's card statement. Visa's merchant data rules say it should be the name customers know you by, the one on your sign. Hypothetical: if you're "Rosie's Tacos" out front and "RJM Holdings LLC" on the statement, you're asking for "I don't recognize this." Check what yours actually says in your portal or with your processor.

Give a receipt every time. Itemized, with your business name the way it reads on the card statement.

Post a refund policy and stick to it. At the counter, at checkout online, on the receipt. A customer who knows how to get a refund from you, and can actually reach you, usually doesn't call the bank.

Dip or tap. Don't swipe or key it. Since the 2015 chip liability shift, if a counterfeit chip card gets swiped at a terminal that can't read chips, the loss generally lands on the merchant.

Use 3-D Secure online. That's the extra identity check the card-issuing bank can run at online checkout. When a sale is authenticated through it, liability for fraud chargebacks generally shifts to the bank. There are exceptions, and it does nothing for "I never got it." For online fraud, though, it's the biggest lever you have.

Refund before it turns into a dispute. If the customer's clearly right, refund it fast. But once a chargeback is filed, don't send a separate refund on your own. Call your processor first, or you can end up paying twice.

If you sell online at real volume, there are services that share your order details with the card-issuing bank when a dispute starts, so it can get resolved before it turns into a chargeback. Fraud Deflect is one of them.

When to fight

Not every chargeback is worth fighting. If the customer has a point, or you don't have the paperwork, accept it, fix what caused it, and move on.

If you have the evidence, fight. Even the small ones. That's money you earned, and nobody fights for it unless you hand over the proof.

This is general education, not legal or financial advice. Card network dispute rules change, and your merchant agreement governs your account, including chargeback fees and reserves.