Mastercard 4849 — Questionable Merchant Activity: What It Is and How to Respond

Mastercard 4849 is raised when Mastercard or an issuer identifies questionable conduct by the merchant — transactions that violate Mastercard's standards, suggest merchant collusion with fraudsters, or indicate deceptive practices. Unlike typical consumer disputes, 4849 can be initiated by Mastercard itself (not just a cardholder) when it detects patterns consistent with merchant misconduct.

Receiving multiple 4849 disputes is a serious signal that may trigger a compliance review. A robust response requires comprehensive transaction documentation and evidence of legitimate business conduct across all disputed transactions — not just the individual charge.

Common reasons you received this dispute

1. 1Merchant accepted payment for goods/services that violated Mastercard's acceptable use policy
2. 2Merchant is suspected of processing transactions for known fraudulent operations
3. 3Unusual transaction patterns that suggest account testing or carding activity
4. 4Merchant processed transactions that violated local laws or Mastercard rules
5. 5Merchant processed a transaction after a card was reported stolen (without 3DS verification)

Can you win this dispute?

Evidence checklist

1. ✅ Required

   Full transaction history for the disputed period: A complete record of all transactions in the timeframe identified, showing amounts, account numbers, authorization codes, and settlement records.

2. ✅ Required

   Cardholder identity verification records: AVS results, 3DS authentication records, or ID verification documentation for the disputed transactions. This is the most critical evidence — it directly counters the suggestion of fraudulent or unconsented transactions.

3. ✅ Required

   Documentation that goods/services comply with Mastercard's acceptable use policy: Product/service descriptions, your terms of service, and evidence that what you sell is permitted under Mastercard's rules.

4. ⭐ Strongly recommended

   Fraud screening records: Velocity check logs, device fingerprinting records, IP reputation scores, and any other fraud screening outputs for the disputed transactions.

5. ⭐ Strongly recommended

   Cardholder communications confirming the transactions: Any order confirmations, delivery records, or post-purchase communications showing the cardholder engaged with the transaction as a legitimate customer.

Key deadlines

How to prevent this chargeback

1. 1

   Implement 3DS authentication for card-not-present transactions: 3DS authentication dramatically reduces 4849 exposure by creating a documented cardholder consent record for every transaction — which directly counters the “questionable merchant activity” allegation.

2. 2

   Review Mastercard's acceptable use policy and ensure all products/services comply: Some product categories require explicit acquirer approval. If you sell anything in a regulated or restricted category, confirm your MCC code and acquirer permissions are correct before processing.

3. 3

   Monitor for carding patterns and block suspicious activity: Many small authorization attempts from different cards on the same device or IP is a classic carding attack. Configure velocity rules to block these patterns and alert your fraud team — carding activity on your account is a primary 4849 trigger.

4. 4

   Work with your acquirer proactively if you receive more than two 4849 disputes: Proactive contact — before Mastercard contacts your acquirer — shows good faith and prevents escalation to a compliance review. Come to that conversation with a root cause analysis and a remediation plan.

Frequently asked questions

Related reason codes