Home  /  News  /  Payments & Risk
Payments & RiskFebruary 9, 2025

Card Scheme Monitoring Programs: KPIs Every Gaming Merchant Must Track

Gaming merchants face strict card scheme thresholds. Learn the concrete KPIs that keep you out of monitoring programs and protect your processing rights.

Card Scheme Monitoring Programs: KPIs Every Gaming Merchant Must Track

Card scheme monitoring programs are among the most consequential operational risks a gaming merchant can face. Visa's VDMP and VFMP, along with Mastercard's equivalent dispute and fraud monitoring frameworks, impose escalating fees and ultimately threaten processing rights when thresholds are breached. Measuring performance against the right KPIs is not an administrative exercise; it is a commercial survival skill.

Why Gaming Merchants Are Disproportionately Exposed

Gaming sits in a high-scrutiny merchant category by default. Impulse deposits, anonymous payment behavior, and the emotional charge of losses all elevate dispute and chargeback volumes relative to most other verticals. Acquirers know this and price accordingly, but pricing is secondary to the real threat: once a merchant identifier lands inside a monitoring program, the operator faces monthly fees that compound until the numbers improve, and termination if they do not.

The schemes use a rolling monthly calculation window. A single bad month, a botched promotion, a processor outage that triggers resubmissions, any of these can push a merchant identifier across a threshold. Understanding exactly where you stand at all times is therefore non-negotiable.

The Core Threshold Metrics You Must Monitor Daily

Chargeback Rate

Both Visa and Mastercard calculate chargeback rate as the number of chargebacks received in a calendar month divided by the number of transactions processed in that same month. The standard early-warning threshold sits at 0.65 percent for Visa and 1.00 percent for Mastercard, with elevated-risk tiers above 0.90 percent and 1.50 percent respectively. Gaming operators should set internal alert thresholds materially below these levels, targeting a ceiling of 0.50 percent as a practical operational limit.

Fraud-to-Sales Ratio

Visa's fraud monitoring program measures fraud basis points: the dollar value of TC40 fraud reports divided by the dollar value of sales, expressed per 10,000. The early-warning threshold is 65 basis points. Because gaming transactions often carry higher average order values than retail, a small number of fraudulent transactions can move this metric quickly. Monitor fraud basis points weekly, not monthly.

Dispute Count

Volume thresholds matter as much as ratios. Visa's early warning level triggers at 75 chargebacks per month regardless of rate. A low-volume gaming site with a clean ratio can still enter a monitoring program purely on count. Track absolute dispute numbers alongside percentages.

TC40 and Fraud Notification Velocity

TC40 reports are issuer-filed fraud notifications that precede chargebacks. Monitoring the velocity at which TC40 reports accumulate gives an operator a 30 to 60 day lead time before disputes arrive. Integrate TC40 data feeds from your acquirer into your risk dashboard and flag any MID that shows a week-on-week increase above 15 percent.

Operational KPIs Beyond Scheme Thresholds

  • First-chargeback resolution rate: The percentage of disputes resolved through representment before escalating to arbitration. Target above 60 percent.
  • Refund-to-chargeback conversion rate: If a player requests a chargeback and the merchant issues a refund, the refund should ideally prevent the dispute from being filed. Track how often proactive refunds successfully intercept scheme disputes.
  • Average days to representment: Slow responses forfeit winnable cases. Internal SLA should be under seven calendar days from dispute receipt.
  • Reason code distribution: A concentration of Visa reason code 10.4 (Card Absent Fraud) signals an authentication gap. A spike in 13.1 (Merchandise Not Received) in a gaming context often indicates account takeover. Reason code segmentation drives root-cause fixes.
  • MID-level rate variance: Operators running multiple merchant identifiers should compare rates across MIDs. An outlier MID often signals a specific payment method, geography, or acquisition channel that needs tighter controls.

Building a Monitoring Program Dashboard

Effective measurement requires a single view combining acquirer reporting, processor data, and your own transaction records. At minimum, a gaming operator's payments risk dashboard should refresh daily and surface current-month projected rates based on transactions to date. Rolling 30-day and calendar-month views should both be visible, because the schemes use calendar months but operational patterns follow rolling windows.

Set tiered alerts: an amber threshold at 70 percent of the scheme limit triggers an internal review; a red threshold at 85 percent triggers escalation to the payments risk lead and acquirer relationship manager. Waiting for the monthly scheme report to discover a problem is a position no operator should accept.

How OnlineShine Approaches This for Operator Clients

Our payments and risk team embeds scheme monitoring KPI tracking into the broader operational reporting we provide to gaming clients. We treat TC40 velocity, chargeback rate projections, and MID-level variance as live operational metrics rather than end-of-month compliance outputs. When a metric moves in the wrong direction, we work with the operator's acquirer and fraud tooling vendors to isolate the cause before it becomes a scheme-level problem. Prevention is always cheaper than remediation once a merchant identifier is formally enrolled in a monitoring program.

FAQ

Frequently asked questions

What is the chargeback rate threshold that triggers Visa's dispute monitoring program?

Visa's Dispute Monitoring Program has an early-warning threshold of 0.65 percent and an elevated threshold of 0.90 percent, calculated as chargebacks received in a calendar month divided by transactions processed in the same month. A separate volume trigger of 75 chargebacks per month applies regardless of rate. Gaming merchants should set internal alert ceilings at 0.50 percent to maintain a safety buffer below these scheme limits.

What are TC40 reports and why do gaming operators need to monitor them?

TC40 reports are issuer-filed fraud notifications submitted to Visa when a cardholder reports a transaction as fraudulent. They are generated before a formal chargeback is raised, giving merchants a 30 to 60 day advance signal of incoming disputes. For gaming operators, monitoring TC40 velocity week-on-week allows risk teams to tighten authentication or refund policies on affected payment methods before the fraud activity translates into scheme threshold breaches.

How should a gaming operator structure internal KPI alerts for card scheme monitoring?

Operators should operate a two-tier alert system: an amber alert set at 70 percent of the relevant scheme threshold, which triggers an internal review of the contributing MIDs and payment methods, and a red alert at 85 percent, which requires immediate escalation to the payments risk lead and the acquirer relationship manager. Both calendar-month and rolling 30-day views should be monitored, because operational patterns do not align perfectly with the calendar windows the schemes use for their calculations.

Why do gaming merchants face higher risk of entering card scheme monitoring programs than other merchants?

Gaming merchants are categorized as high-risk by card schemes due to behavioral factors including impulse deposit patterns, elevated dispute rates driven by loss-related chargebacks, and the concentration of card-absent transactions. Higher average transaction values in gaming also mean that a small number of fraud incidents can move fraud basis point metrics significantly. These structural factors require gaming operators to apply more rigorous, more frequent monitoring than merchants in lower-risk categories.

Keep reading

Related articles

Show us one brand.
We will find the leaks.

Book a 30-minute teardown. We walk through one of your brands and show you exactly where revenue, retention or compliance is slipping, no obligation.