Replaced by VAMP — June 2025

Visa Fraud Monitoring Program (VFMP)

VFMP was Visa's standalone fraud ratio monitoring program until June 2025, when it was merged into VAMP alongside VDMP. Use this calculator to see how your numbers would have compared under both the old and new programs.

Then — VFMP (until June 2025)

  • Tracked fraud reports (TC40) only
  • Standard trigger: ≥ 0.65% AND ≥ 75 fraud/month
  • High Risk trigger: ≥ 0.9% AND ≥ 90 fraud/month
  • Ran separately from VDMP (chargebacks)

Now — VAMP (from June 2025)

  • Combines TC40 fraud reports + TC15 chargebacks
  • Early Warning: ≥ 0.9% combined
  • Excessive: ≥ 1.5% combined (from April 2026)
  • Single unified ratio — no separate fraud track

1Your monthly numbers

5,000
100100,000

Visa 10.4, 10.5 — used for VFMP fraud ratio

35
01,000

Non-fraud disputes — added for VAMP combined rate

10
03,000

Program thresholds at a glance

VFMP Standard: ≥ 0.65% AND ≥ 75 fraud/month
VFMP High Risk: ≥ 0.9% AND ≥ 90 fraud/month
VAMP Early Warning: ≥ 0.9% combined
VAMP Excessive: ≥ 1.5% combined (April 2026)

2Your ratios

Fraud ratio (VFMP logic)

TC40 fraud disputes ÷ transactions

VFMP standard: 0.65% + 75 min

0.70%

Combined ratio (VAMP logic)

(TC40 fraud + TC15 disputes) ÷ transactions

VAMP excessive: 1.5% threshold

0.90%

Under old VFMP program

Below VFMP Threshold (historical)

Under the old VFMP program, your fraud ratio would not have triggered monitoring. Note: VFMP no longer exists — check your VAMP status below.

Under current VAMP program

VAMP: Safe

Below the VAMP combined threshold. Keep monitoring monthly — the 1.5% ceiling applies to TC40 fraud reports + TC15 chargebacks combined.

VAMP is what matters today — track your fraud rate.

ChargeMate fights fraud chargebacks with CE 3.0 and AI-generated evidence so your combined VAMP rate stays below 1.5%.

What Was the Visa Fraud Monitoring Program?

The Visa Fraud Monitoring Program (VFMP) was Visa's standalone fraud ratio tracking system, operating from the early 2000s until its replacement by VAMP in June 2025. VFMP monitored TC40 fraud dispute reports — internal Visa records filed by issuing banks when cardholders report fraud — and tracked the resulting fraud rate against total settled transactions.

VFMP ran entirely separately from the Visa Dispute Monitoring Program (VDMP), which tracked formal chargeback ratios. A merchant could breach VFMP without breaching VDMP, and vice versa. Each program had its own fine schedule and remediation framework. This separation meant merchants with high fraud rates but carefully managed chargeback rates could remain in good standing under VDMP while racking up VFMP fines.

VFMP is no longer active. If you are researching your compliance obligations today, the relevant program is VAMP — which combines TC40 fraud reports and TC15 chargebacks into a single unified ratio with a 1.5% Excessive threshold (as of April 2026).

VFMP Thresholds (Historical Reference)

TierFraud ratioMin fraud txnsConsequence
Safe< 0.65%AnyNo monitoring
Standard≥ 0.65%≥ 75/monthMonitoring + escalating fines
High Risk≥ 0.9%≥ 90/monthMaximum fines + termination risk

Historical reference only — VFMP was retired June 2025. Verify all compliance obligations with your acquirer under the current VAMP framework.

Why VFMP Was Replaced by VAMP

Running VFMP and VDMP as separate programs created a structural loophole: merchants could manage their formal chargeback rate down while allowing fraud rates to climb, or vice versa. Because each program had its own threshold and its own fine schedule, a merchant could technically be compliant under both by keeping each individual metric just below its respective trigger — even if the combined dispute and fraud burden on the payment ecosystem was unacceptably high.

VAMP eliminated this by combining both metrics into a single ratio. TC40 fraud reports and TC15 dispute transactions are added together in the numerator; total settled card-absent transactions form the denominator. There is one threshold, one monitoring program, and one fine structure — making the system significantly harder to manage around the edges.

The practical consequence: if your fraud ratio was near the VFMP Standard threshold of 0.65%, you may now sit near the VAMP Early Warning threshold of 0.9% combined — even without any change in behaviour. Adding regular chargebacks to the fraud count often pushes merchants higher than they expect.

VFMP vs VAMP: The Key Differences

What counted in the ratio
VFMP (old)TC40 fraud reports only
VAMP (now)TC40 fraud reports + TC15 chargebacks combined
Standard threshold
VFMP (old)0.65% (with ≥ 75 fraud transactions)
VAMP (now)0.9% Early Warning (no minimum count)
High Risk / Excessive
VFMP (old)0.9% (with ≥ 90 fraud transactions)
VAMP (now)1.5% Excessive (from April 2026)
Ran alongside
VFMP (old)VDMP (separate chargeback program)
VAMP (now)Single unified program — no separate tracks
Denominator
VFMP (old)All settled transactions
VAMP (now)Card-absent (CNP) settled transactions only

What Is a TC40 Fraud Report?

A TC40 is an internal Visa data format used by issuing banks to report suspected fraud transactions to Visa's fraud monitoring system. TC40 reports are filed when a cardholder reports their card as compromised or used without authorisation. They are generated before the formal chargeback process begins — often days or weeks before the merchant receives a chargeback notification.

TC40 reports are Visa's internal fraud intelligence, not chargebacks themselves. However, they feed both the historical VFMP fraud ratio and the current VAMP combined ratio. A high TC40 volume at your merchant account — even before the corresponding chargebacks arrive — would have triggered VFMP monitoring and will today trigger VAMP monitoring.

Merchants cannot directly access their own TC40 data. Visa's Rapid Dispute Resolution (RDR) programme and Verifi's Order Insight can partially offset TC40 impact by resolving disputes before they escalate. Chargeback alert services (Verifi, Ethoca) provide advance notice of cardholder fraud reports, creating a window for proactive action.

Frequently Asked Questions

Is VFMP still active?
No. Visa retired VFMP on June 1, 2025, when it launched VAMP (Visa Acquirer Monitoring Program). VAMP combined VFMP and VDMP into a single program. If you received a VFMP notice before June 2025, your current compliance obligations are under VAMP.
My fraud ratio was below the VFMP threshold — am I safe under VAMP?
Not necessarily. VAMP adds regular chargebacks (TC15) to your fraud count, and uses only CNP transactions in the denominator. A merchant with a 0.5% fraud rate under VFMP could have a 1.1% combined rate under VAMP once regular chargebacks are included — above the Early Warning threshold. Use the calculator above to estimate your VAMP position.
What were the VFMP fines?
VFMP fines were assessed to your acquirer and typically passed through to you. The schedule escalated monthly — early months carried lower fines, rising significantly after 5–6 months of non-compliance. VFMP is no longer active; current fines under VAMP follow a different schedule determined by your acquirer.
How did VFMP differ from VDMP?
VFMP tracked TC40 fraud reports only. VDMP tracked TC15 formal chargebacks only. They ran as separate programs with separate thresholds — 0.65% Standard for both, but different minimum counts. A merchant could breach one without breaching the other. VAMP replaced both with a single combined ratio, eliminating this distinction.
Does VAMP use the same 0.65% threshold as VFMP?
No. VAMP uses a 0.9% Early Warning threshold and a 1.5% Excessive threshold (as of April 2026). The percentage thresholds are higher than VFMP's 0.65% Standard trigger, but VAMP counts both fraud reports and chargebacks together — making the effective measurement stricter than VFMP despite the higher percentage on the label.
What is the best way to reduce TC40 fraud reports?
3D Secure 2.0 (3DS2) is the highest-impact tool: authenticated transactions shift fraud liability to the issuer, preventing TC40 reports from appearing in your VAMP ratio. For disputes that do arrive as 10.4 fraud chargebacks, Visa Compelling Evidence 3.0 (CE 3.0) lets you shift liability back to the issuer using prior undisputed transaction evidence — reducing both your dispute count and your ratio.