Skip to content
Risk And Compliance 5 min read

Mastercard Mastercom Dispute Categories Reference

Mastercard Mastercom dispute categories — all 7 codes, cardholder filing windows, merchant response deadlines, and ECP/HECM thresholds as of 2026.

PB
By Shaun Toh
TL;DR

Mastercard Mastercom: 4 categories, 7 active codes, 45-day merchant response window. Auth and POI Error: 90-day filing window. Fraud and Cardholder Disputes: 120 days. ECM at 100+ chargebacks + 1.5–2.99% ratio; HECM at 300+ and ≥3.00%.

A reference map of every active Mastercard Mastercom dispute code as of mid-2026, with cardholder filing windows, merchant response deadlines, defence notes, and monitoring program thresholds. For the narrative explanation — how Mastercom compares to Visa VCR, how Ethoca Alerts and CDRN work at the pre-dispute stage, and what the 2024 arbitration changes mean operationally — see Scheme Chargeback Rules in 2026.

Quick reference: all active codes

CodeCategoryNameCardholder filing windowMerchant response window
4808AuthorizationRequired Authorization Not Obtained90 days45 days
4834Point-of-Interaction ErrorPOI Error90 days45 days
4837FraudNo Cardholder Authorization120 days (up to 540 in select cases)45 days
4870FraudChip Liability Shift120 days45 days
4841Cardholder DisputesCancelled Recurring Transaction or Digital Goods120 days45 days
4853Cardholder DisputesGeneral Cardholder Dispute120 days45 days
4855Cardholder DisputesGoods or Services Not Provided120 days45 days

The 45-day merchant response window across all Mastercard categories is 15 days longer than Visa’s 30-day window. Evidence collection should begin the moment the notification arrives, not when the deadline approaches.

Authorization — Code 4808

Disputes filed when no valid authorization was obtained, when the protection period has expired, or when multiple authorizations were incorrectly requested for a single transaction.

Sub-conditionTypical triggerDefence notes
Required authorization not obtainedTransaction processed without an authorization codeProvide the authorization approval record from your PSP or acquirer showing the auth code was obtained before capture
Expired protection periodAuthorization obtained but not used within the validity windowDocument the transaction was captured within the authorization validity period; re-authorize proactively if timeline was at risk
Multiple authorization requestsMultiple authorizations requested for a single transaction amountDocument the single valid authorization used; confirm others were voided or not captured against

Point-of-Interaction Error — Code 4834

Processing errors at the point of transaction — duplicates, amounts that differ from the authorized value, transactions already settled by another method, and ATM-related issues.

Sub-conditionTypical triggerDefence notes
Duplicate processingSame transaction submitted twiceProvide distinct order IDs and timestamps proving separate transactions; or confirm a refund was issued for the duplicate
Paid by other meansTransaction charged after customer already settled by cash, another card, or a prior refundProvide evidence no other payment was accepted for the same order; or confirm which transaction is the legitimate one
Amount differs from authorized amountCapture amount exceeds authorized amountShow authorization and capture records match; for legitimately variable amounts (tips, fuel, hotel incidentals), cite applicable Mastercard authorization rules for that merchant category
Late presentmentTransaction presented outside the allowable presentment windowLimited defence surface — primarily an acquirer/processor-level issue; document processing timestamps to show timely presentment
ATM processing errorIncorrect amount dispensed or debited at ATMATM transaction log documentation; resolution typically involves acquirer or issuer rather than merchant

Fraud — Codes 4837 and 4870

CodeNameTriggerDefence notesKey notes
4837No Cardholder AuthorizationCardholder claims the transaction was unauthorizedTransaction-level evidence: device fingerprint, IP address, account history showing prior undisputed transactions from the same cardholder, delivery confirmation to cardholder address, billing/shipping address matchPrimary Mastercard fraud code — the analogue to Visa 10.4. No Compelling Evidence equivalent exists for Mastercard; defence relies entirely on transaction-level documentation. 120-day filing window; up to 540 days in select jurisdictions or for cases involving underage cardholders.
4870Chip Liability ShiftCounterfeit or altered chip card used at a terminal that did not correctly process the EMV chipDocument that the terminal is EMV-capable and that the chip was read correctly; provide EMV cryptogram data if available from your acquirerLiability shifts toward the acquirer/merchant if the terminal failed to process the chip. Limited defence surface if the terminal was not EMV-capable at the time of the transaction.

Cardholder Disputes — Codes 4841, 4853, 4855

All three carry 120-day cardholder filing windows and 45-day merchant response windows. These are the Mastercard equivalents of Visa’s Collaboration-workflow consumer dispute codes.

CodeNameTriggerDefence notes
4841Cancelled Recurring Transaction or Digital GoodsTransaction charged after cardholder cancelled a recurring arrangement, or digital goods not delivered as describedCancellation policy acknowledged at sign-up; timestamp showing the charge was initiated before the cancellation request; digital delivery log confirming goods were delivered and accessed by the cardholder
4853General Cardholder DisputeBroad umbrella code — merchandise or services materially different from description, credit not processed, damaged goods, quality issuesThe hardest code to defend without category-specific evidence. Respond to the cardholder’s specific stated claim; use product photos, correspondence records, return policy documentation, and delivery confirmation to address the particular issue raised — generic templates perform poorly here
4855Goods or Services Not ProvidedCardholder claims goods or services were not delivered or not availablePhysical goods: tracking number, delivery confirmation, signature if required. Digital/SaaS: access logs, login timestamps, activation confirmation. Services: booking confirmation, service completion record

For SaaS and subscription operators, 4841 (cancelled recurring) typically runs alongside 4837 as the highest-volume Mastercard codes. For physical e-commerce, 4855 (not provided) mirrors Visa’s 13.1 exposure. 4853 acts as a catch-all — claims that don’t fit neatly elsewhere route here.

ECP and HECM monitoring thresholds

Both conditions must be met simultaneously — a volume spike without a chargeback ratio breach, or a ratio breach with low volume, does not trigger the program.

ProgramChargebacks (month X)RatioMonthly fineFine escalation
ECM (Excessive Chargeback Merchant)≥1001.5%–2.99%Up to $1,000 (months 1–3)Escalates after month 3
HECM (High Excessive Chargeback Merchant)≥300≥3.00%2× ECM rateMaximum $200,000/month

Ratio formula: chargebacks in month X ÷ sales in month X−1 (one-month lag in the denominator). A high-volume month suppresses your ratio the following month; a low-volume month amplifies it.

Mastercard has not announced a threshold reduction for 2026. The ECP/HECM structure has been stable since 2023 — in contrast with Visa’s VAMP merchant threshold dropping from 2.2% to 1.5% in April 2026.

Changes that matter (2024–2026)

DateChangeOperator impact
June 11, 2024TLID (Transaction Linkage ID, 22 characters) introducedRequired across authorization, clearing, and single message systems to link original and related transactions. PSPs that haven’t updated their integration will produce matching failures in recurring and related-transaction disputes
October 2024Arbitration: 10-calendar-day acquirer rejection window removedAcquirers can no longer reject or delay accepting arbitration case filings; dispute resolution timelines effectively compress on contested cases
June 17, 2025Authorization type must be explicitly identified as pre-authorization or finalThe previous “undefined” authorization type is no longer accepted by Mastercard processing systems — affects operators using pre-auth flows for hotels, car rentals, or estimated final charges

Operator watchouts

  • 4853 is the widest target. The general dispute code accepts claims that don’t fit cleanly elsewhere — response teams need to address the cardholder’s specific stated reason, not a generic template. Win rates on 4853 vary more than any other code and depend entirely on matching the evidence to the specific claim.
  • 45-day window is longer than Visa’s but shouldn’t create complacency. Evidence has its own decay window — delivery confirmations, cancellation logs, access records, correspondence — that closes before the dispute response deadline. Start collecting immediately.
  • Both ECP and HECM conditions must be met simultaneously. Volume without ratio breach, or ratio breach at low volume, does not trigger either program. Track both dimensions independently rather than relying on a single blended ratio metric.
  • Ratio uses month X−1 sales in the denominator. Seasonal low-volume months (holiday shutdown, off-peak periods) amplify your dispute ratio the following month even without any change in absolute dispute volume. Build this lag into your monitoring model.
  • TLID matching is now required. If your acquirer or PSP hasn’t updated to include TLID across auth, clearing, and single-message flows, you’ll face linking failures in recurring-transaction disputes — these surface as documentation gaps at the arbitration stage.
  • No CE 3.0 equivalent exists for Mastercard. Visa’s automated dispute deflection mechanism for 10.4 has no Mastercard analogue. 4837 defences rely entirely on transaction-level evidence — there is no historical-transaction-based auto-qualification path.

For term definitions — chargeback, dispute, chargeback ratio, chargeback representment — see the Payments Glossary.

Shaun Toh By Shaun Toh · Director, Digital Payments · Razer

Subscribers get the PSP Selection RFP Kit — 60+ structured questions, evaluation scorecard, and negotiation playbook — delivered to your inbox instantly.

More Risk And Compliance briefings