When your own customer files the chargeback

A $4,200 ring went out the door in June. Signed for, wrapped, photographed, a happy customer. In September the chargeback lands and it is coded as fraud, which means somebody is saying the card was used without permission. You know the name on it. She has bought from you twice before.

That is friendly fraud — the polite industry term for it now is first-party misuse. The customer made the purchase and then disputed it anyway, sometimes to get a refund without returning anything, more often because the statement descriptor was unrecognizable and the dispute button was easier than a phone call.

What the survey actually says

Chargebacks911 published its 2026 Chargeback Field Report on July 1. Among retailers it surveyed, 74.4% called friendly fraud a significant concern, and of the merchants who reported any change over three years, 73.7% said it got worse. The number that should get your attention is a different one: 38% said chargeback costs had started to influence their pricing, up from 32.5% the year before.

Read that with the right amount of salt. It is a vendor survey of merchant sentiment, not a measurement of how much friendly fraud actually happens — and the vendor sells chargeback services. It still matches what we hear on the phone every week.

Your chargeback ratio does not care whether the dispute was honest. A customer who forgot what she bought costs you exactly what a criminal does.

The rule that was built to stop it

Visa’s Compelling Evidence 3.0 lets you kill a fraud-coded dispute before it becomes a chargeback, if you can show you have a real history with that cardholder. The requirements are specific: two previous undisputed transactions on the same card, between 120 and 365 days before the one being disputed, plus two matching data elements across them. The elements are the customer account or login ID, the delivery address, the device fingerprint, and the IP address, and at least one of the two has to be the device or the IP.

Meet that and liability moves to the card issuer — the dispute stops before it costs you the goods, the revenue and the fee.

If you sell across a counter, this mostly will not help you

CE3.0 was designed for e-commerce, which is the part nobody writes down. Device fingerprints and IP addresses come from a website. If your sale happened in the store, or over the phone to a customer who has been coming in for eleven years, you will usually fail the two-matching-elements test on technicality alone.

So for the in-store half of your business, the defense is older and duller: it is the paper you kept at the time of sale. A signed receipt. A delivery confirmation with a signature. Your return policy, posted where the customer stood, and printed on the receipt she took home. A photograph of the piece before it left. None of it is clever — and all of it wins disputes that CE3.0 cannot touch.

What to do this month

1. 01Sort last year’s disputes into three piles. Real fraud, a service problem, and a customer who changed her mind. Most stores find the third pile is the biggest and nobody had ever separated it out.
2. 02Read your statement descriptor on an actual statement. If it shows a holding company name nobody recognizes, that alone is generating disputes — and it is a fifteen-minute fix.
3. 03Ask whether your online sales submit CE3.0 evidence automatically. Many do not. It is a configuration, not a purchase.
4. 04Fix the counter habits before you buy software. The stores that lose the fewest disputes are not the ones with the best tools.

A quarter of the merchants in that survey are using AI to fight this, and another third say they plan to. For a store doing a few disputes a month, that is the wrong end of the problem. The four habits that stop most disputes at the counter cost nothing and work on the pile that is actually growing.