Most merchants discover they're on the MATCH list the same way: a new processor declines their application and mentions a "prior termination," or a high-risk specialist tells them their business is flagged in a database they've never heard of.
If that's where you are, this is the guide. Every acquiring bank is required to check MATCH before approving a new merchant account. Being listed doesn't end your ability to accept card payments — but it changes the terms of every conversation you'll have with a processor for the next five years.
Here's what MATCH actually is, how the 14 reason codes work, what can realistically be removed and what can't, and how to get processing while you wait.
TL;DR: The MATCH list (Merchant Alert to Control High-Risk) is a Mastercard-administered database every acquiring bank must check before approving a new merchant account. A listing stays for 5 years and cannot be removed except under specific conditions: factual error by the adding acquirer, Code 14 (Identity Theft), or rare acquirer discretion on Code 4. Code 4 (Excessive Chargebacks) is the most common and most workable path. Being listed doesn't end your ability to accept cards — but it changes every processing conversation for the next five years.
What the MATCH list actually is
MATCH stands for Merchant Alert to Control High-Risk. It's a database maintained by Mastercard that all acquiring banks are required to query before approving a new merchant account. When an acquirer terminates a merchant account for cause, they're required to add that merchant — and often the business's principals by name — to MATCH within 5 business days.
You may also hear it called the TMF — Terminated Merchant File — an older name for the same system. Both terms refer to the same Mastercard-administered database.
A MATCH record includes: the merchant's legal business name, DBA, address, tax ID, and the names and dates of birth of principals tied to the account. When you apply elsewhere and the new acquirer runs a MATCH query, they see the reason your previous account was terminated.
A MATCH listing stays on file for 5 years from the date of termination. It expires automatically — no action required on your part — but the 5-year clock starts from the termination date, not from the date you discovered the listing. Both the 5-year retention period and the 5-business-day submission requirement are specified in Mastercard's Security Rules and Procedures, Merchant Edition.
All 14 MATCH reason codes
Every listing includes a reason code that tells the new acquirer why you were terminated. The code drives their underwriting decision: whether to approve you at all, what rates to charge, and what reserve to require.
| Code | Reason | Severity |
|---|---|---|
| 1 | Account Data Compromise | Critical — cardholder data breach |
| 2 | Common Point of Purchase (CPP) | Critical — your location tied to fraud pattern |
| 3 | Laundering | Disqualifying — processing for undisclosed third parties |
| 4 | Excessive Chargebacks | Moderate to high — chargeback ratio exceeded thresholds |
| 5 | Excessive Fraud | Critical — fraud ratio exceeded card network thresholds |
| 6 | Reserved | Not used |
| 7 | Fraud Conviction | Disqualifying — principal convicted of fraud |
| 8 | Mastercard Questionable Merchant Audit Program (QMAP) | Critical — flagged by Mastercard's own risk monitoring |
| 9 | Bankruptcy / Liquidation / Insolvency | Moderate — filed with unresolved chargeback liability |
| 10 | Violation of Standards | Moderate — violated card network operating rules |
| 11 | Merchant Collusion | Disqualifying — participated in organized fraud |
| 12 | PCI-DSS Non-Compliance | Moderate to high — failed PCI security requirements |
| 13 | Illegal Transactions | Disqualifying — processed payments for prohibited activity |
| 14 | Identity Theft | Disputable — if you're the victim, this can be removed |
Codes 3, 7, 11, and 13 are effectively disqualifying. Most legitimate high-risk processors won't approve a merchant listed under these codes regardless of how much time has passed.
Code 4 is the most common — and the code most often applied to merchants who hit operational problems rather than committed fraud.
Code 14 — Identity Theft is the only code that's straightforwardly disputable: if someone obtained a merchant account in your name, you have grounds to have the listing removed with documentation.
Code 4: the most common path onto MATCH
The majority of merchants who find themselves on MATCH got there through Code 4 — not because of fraud, but because their chargeback ratio crossed a threshold their acquirer couldn't sustain.
How that threshold works: Mastercard's Excessive Chargeback Program flags merchants at a 1.5% chargeback ratio with 100 or more chargebacks in a calendar month (Mastercard Security Rules and Procedures, Merchant Edition). Visa runs a parallel program. But acquirers can — and frequently do — terminate merchants before card network thresholds are reached, based on their own internal risk criteria.
The gap between those two numbers is where most merchants get caught. Mastercard's ECM floor is 1.5%. Many acquirers have internal limits at 0.5–0.65%. Three chargebacks on 400 transactions is 0.75%. That looks minor. It's also above the internal threshold at a number of standard acquirers, and enough to start a conversation you don't want to have.
What triggers Code 4 in practice:
- A subscription business with a confusing cancellation process and high "I forgot about this charge" disputes
- A contractor whose customer disputed a large payment after a disagreement over scope
- A restaurant in a tourist area with high card-not-present fraud from stolen card numbers
- A retail business that ran a promotion, saw a volume spike, and couldn't fulfill orders fast enough
The processor doesn't always warn you. In many cases, the first indication is a termination letter — and by the time you call, the MATCH listing has already been submitted.
One composited example from our portfolio: a Colombian SaaS company processing approximately $180,000 a month in U.S. dollars had built a subscription product with a 14-day trial that was difficult to cancel. Chargebacks climbed from 0.4% to 1.7% over three months as trial users disputed charges after forgetting to cancel. The acquirer sent a single warning, then terminated and submitted the MATCH listing seven days later. The founders didn't know they were on MATCH until their next bank application was declined six weeks after that. (Details composited from multiple ClickWerxs engagements; numbers anonymized.)
The chargeback prevention strategies that prevent Code 4 are worth understanding before you approach those thresholds, not after.
How merchants find out they're on MATCH
You are not notified when you're added. The adding acquirer has no obligation to tell you the listing has been submitted. Merchants find out three ways:
A new processor declines and says why. The better high-risk processors will tell you directly that you're on MATCH and give you the reason code. Standard acquirers often just decline without explanation.
Multiple unexplained application declines. If you've applied to several processors and received vague declines, MATCH is a likely cause.
A self-inquiry. You can check yourself through a Mastercard-licensed acquirer or a registered MATCH inquiry service. Cost is typically $25–$100. The result shows the adding acquirer, termination date, and reason code. If you've been denied multiple times without explanation, running a self-inquiry before spending more time on applications is worth the cost.
The self-inquiry result tells you who added you — which is the key piece of information you need if you plan to dispute it.
Can you get off MATCH?
Rarely, and only under specific conditions. Mastercard administers the program but does not manage individual merchant disputes. The adding acquirer controls your listing. To be removed before the 5-year expiration:
The listing was added in error. If the acquirer made a factual mistake — wrong tax ID, wrong business name, applied the wrong reason code, or listed a termination threshold that wasn't actually met — they're obligated to correct it. Contact their risk or compliance department directly with documentation supporting the error. This is the most realistic path to early removal for legitimate merchants.
Code 14 — Identity Theft. If you can demonstrate that someone else obtained a merchant account using your identity, the adding acquirer must remove the listing. You'll need a police report and documentation of the identity theft. This is the one code with a clear removal standard.
Acquirer discretion for Code 4 (rare). Some acquirers will remove a Code 4 listing if the chargeback liability has been fully satisfied, the underlying issue has demonstrably been resolved, and the merchant can document operational changes. This is uncommon and entirely at the acquirer's discretion — but worth asking about if Code 4 was your reason.
What doesn't work: Contacting Mastercard directly to request removal. Mastercard will redirect you to the adding acquirer. There's no appeals process at the network level for individual merchants.
If none of the above conditions apply and the listing is accurate, the 5-year expiration is the practical path. Track your exact termination date — that's when the listing drops.
Getting processing while you're on MATCH
Being on MATCH doesn't mean you can't accept cards. It means standard acquirers won't approve you. Here's the realistic landscape:
Domestic high-risk processors. A segment of U.S. processors underwrite MATCH merchants directly. They look at reason code, time since listing, current business operations, and chargeback history — not just MATCH status. High-risk merchant accounts come with different terms than a standard merchant account: rates of 3–5%+, rolling reserves of 10–25% held for 6–12 months, and month-to-month contracts. The rates and reserves are higher, but the accounts are real and functional. Our guide to high-risk merchant accounts covers what underwriters actually look for and how to approach the application.
Offshore acquiring. Some offshore acquirers operate in jurisdictions that don't rely on the MATCH database and will underwrite merchants that domestic processors decline. This comes with tradeoffs: less regulatory protection, currency conversion exposure, limited recourse if the processor holds funds. It's an option for specific situations — not a first choice.
ACH / eCheck. ACH isn't subject to card network rules and doesn't query MATCH. Bank-to-bank transfers work for B2B merchants, service businesses, and subscription models where customers can be directed to pay via bank account. Per-transaction costs are much lower ($0.25–$0.75 flat vs. 3–5% for card), but chargeback windows are longer — up to 60 days for consumer ACH — and not all customers will have banking information ready.
What to do with every processor you approach. Disclose your MATCH status before they run the inquiry. A processor who discovers it on their own views it as a red flag about transparency, not just risk. A processor you've told upfront can evaluate whether your situation fits their underwriting. Hiding it wastes time and closes doors that might otherwise be open.
How to prevent a MATCH listing
Code 4 — Excessive Chargebacks — is the most preventable path onto MATCH. The merchants who end up there almost always had warning signs months before the termination.
Monitor your chargeback ratio monthly. Your processor's reporting should show this. Above 0.5%, investigate the source. Above 0.75%, act. Don't wait for the acquirer to raise the issue.
Use pre-chargeback alerts. Ethoca (Mastercard) and Verifi/Order Insight (Visa) notify you when a customer disputes a charge before it becomes a formal chargeback — typically 24–72 hours before the dispute is filed. A refund issued at that stage costs $15–40 in alert fees and doesn't touch your ratio. A chargeback that files costs the alert fee plus $15–100 in acquirer fees, plus the transaction reversal, plus one tick against your ratio. The math is obvious once you see it.
Fix your statement descriptor. A meaningful share of chargebacks come from customers who don't recognize the charge and call their bank instead of you. If your business operates as "Coastal Renovations" but your descriptor reads "CRL MERCH 8005551234," that's a category of disputes you can eliminate. Visa and Mastercard allow soft descriptors up to 22 characters. Use your recognizable DBA name and include a phone number or website customers can reach before they dispute.
Make your refund policy impossible to miss. A significant share of chargebacks come from customers who wanted a refund, couldn't find the process, and went to their bank instead. Remove that friction and you remove a source of disputes.
Document everything. Signed estimates, delivery confirmation, communication logs, authorization records. The merchants who win disputes are the ones who can produce documentation in 24 hours. The ones who lose are the ones who can't find the paperwork.
Consider whether your account type matches your risk profile. Some businesses get put into standard merchant accounts that weren't underwritten for their industry's chargeback pattern. A contractor doing $100,000 jobs, a healthcare business with subscription billing, a restaurant in a high-fraud tourist area — these are better served by high-risk merchant accounts with acquirers who understand the category. The underwriting is more rigorous, but the terms are designed for your reality, and the acquirer is less likely to terminate at the first sign of elevated disputes.
What to do if you're already in Mastercard's Excessive Chargeback Program
Being in ECP is not the same as being on MATCH. It's a monitoring state with a timeline — and most merchants don't know the timeline has already started when they get the notification.
ECM status begins when your chargeback ratio hits 1.5% with at least 100 chargebacks in a calendar month. HECM status begins at 3.0% with at least 300 chargebacks. Both are defined in Mastercard's Security Rules and Procedures, Merchant Edition. Monthly assessments apply for each month you remain in the program — charged to your acquirer, who passes them through to you.
Twelve consecutive months in ECM without resolution gives your acquirer grounds to terminate and MATCH-list under Code 4. That 12-month figure is Mastercard's minimum standard. Your acquirer's actual tolerance may be shorter. Some terminate at month three if ratios aren't trending down. The notification is not a guarantee of 12 months.
If you've received an ECP notification:
Respond in writing within 30 days. Your acquirer will ask for a remediation plan. Get your response dated and documented. This creates a record that you engaged — which matters if you later dispute the MATCH listing on factual error grounds.
Ask what threshold your acquirer is actually watching. Mastercard's published ECM floor is 1.5%. Your acquirer's internal threshold may be 0.8%. You need the number they're tracking, not just the network standard.
Submit a remediation plan with dated commitments. Not "we will improve our chargeback process." Specific, measurable steps: new cancellation flow live by [date], Ethoca alerts enrolled by [date], monthly ratio target below [X%] by [month]. Vague reassurances don't move underwriters. A dated plan with measurable milestones does.
Track your ratio weekly. Monthly reporting is too slow when you're in monitoring. You need to know your running ratio before the calendar month closes so you can act — delay a billing cycle, push proactive refunds, catch disputes at the alert stage before they're filed.
Don't assume the notification means termination is coming. Merchants exit ECP within 60 days by fixing the source issue. Getting the notification and doing nothing is what converts it into a MATCH listing. What converts it into an exit is identifying the specific dispute category driving the ratio and eliminating it.
What Visa's VAMP program means if you're close to MATCH thresholds
Visa replaced two separate monitoring programs (VDMP and VFMP) with a single program called VAMP — Visa Acquirer Monitoring Program — effective April 1, 2025. The change matters because it affects how acquirers manage merchants who are approaching risk thresholds, which in turn affects when they decide to terminate accounts and submit MATCH listings.
VAMP combines fraud alerts (TC40) and dispute data into a single ratio. The merchant threshold dropped from 2.2% to 1.5% for North American merchants beginning April 1, 2026, with a transitional advisory period through September 30, 2025 and enforcement beginning October 1, 2025 (Visa VAMP Fact Sheet, April 2025). Acquirers who allow too many merchants to hit VAMP thresholds face penalties from Visa directly — which increases their incentive to terminate accounts before those merchants push them over their own acquirer-level limits.
The practical effect: acquirers are tightening their internal trigger points. Merchants who were previously tolerated at 0.8% chargeback ratios are seeing conversations start at 0.6%. If you're operating in a category with historically elevated chargebacks — travel, software, health, subscriptions — your acquirer's internal timeline for termination may be shorter now than it was before April 2025.
Frequently Asked Questions
Can I find out who added me to MATCH and for what reason?
Yes. A MATCH self-inquiry through a Mastercard-licensed acquirer or a registered inquiry service ($25–$100) returns the adding acquirer's name, the termination date, and the reason code. This is the first step if you want to dispute the listing, because only the adding acquirer can remove it. Knowing who added you and what code they used tells you whether you have factual error grounds (the code is wrong, the threshold wasn't actually met) or need to work through code-specific remediation paths. Run the inquiry before applying anywhere else — you'll know what you're working with.
What's the difference between MATCH and Visa's VAMP program?
MATCH is a termination database: you're added after an account is closed for cause. Visa's VAMP (Visa Acquirer Monitoring Program) is an active monitoring program: you're enrolled while your account is still open if your fraud-plus-dispute ratio crosses thresholds. MATCH ends your ability to get standard processing. VAMP triggers fines and a remediation window with your current acquirer. The connection is that sustained VAMP violations give your acquirer grounds to terminate your account and add you to MATCH — so VAMP is what you manage to avoid MATCH, not an alternative to it.
How long does a MATCH listing last?
Five years from the date of termination. The listing expires automatically — you don't need to do anything. The clock starts from your termination date, not from the date you discovered you were listed. If you don't know your termination date, a MATCH self-inquiry will show it.
How do I know if I'm on the MATCH list?
You can run a MATCH self-inquiry through a Mastercard-licensed acquirer or a registered third-party inquiry service, typically for $25–$100. Most merchants find out when a new processor declines their application and discloses the reason. If you've received multiple unexplained declines, running a self-inquiry before applying again is worth the cost.
Can a MATCH listing be removed early?
Only under specific conditions: the listing was added in error (factual mistake by the acquirer), you're listed under Code 14 (Identity Theft) and can prove it, or — rarely — the adding acquirer agrees to remove a Code 4 listing once the underlying issue is resolved. Mastercard doesn't manage individual removal requests; disputes go directly to the adding acquirer. If none of these conditions apply, the 5-year expiration is the realistic outcome.
Can I still accept credit cards while on MATCH?
Yes, through processors who specialize in high-risk merchant accounts. Approval depends heavily on your reason code — Code 4 (Excessive Chargebacks) and Code 12 (PCI Non-Compliance) are more workable than Code 3 (Laundering), Code 7 (Fraud Conviction), Code 11 (Collusion), or Code 13 (Illegal Transactions). Expect rates of 3–5%+, rolling reserves of 10–25%, and closer scrutiny. ACH processing is also available without a MATCH check and works well for B2B and service businesses.
What is the difference between Code 4 and Code 5 on MATCH?
Code 4 is Excessive Chargebacks — your chargeback ratio exceeded thresholds sustained over time. Code 5 is Excessive Fraud — a distinct metric focused on fraudulent transaction volume rather than customer disputes. Both can result from operational problems without intentional wrongdoing. Code 4 is far more common and generally viewed as more workable by high-risk underwriters. Code 5 carries more scrutiny because it indicates a pattern of fraud running through the account, even if the merchant wasn't the source.
Who adds merchants to MATCH?
The acquiring bank that terminated the merchant account adds the listing within 5 business days of termination. Mastercard audits compliance with this requirement. No one else — not card networks, not other merchants, not payment processors who didn't hold your account — can add you to MATCH. Mastercard itself doesn't initiate listings; it administers the database.
If you're dealing with a MATCH listing and need to evaluate your options, our team works with merchants navigating high-risk situations regularly — including finding processors suited to your specific reason code, timeline, and industry. We can give you an honest read on what's realistic.
Disclaimer: This post is for informational purposes only and is not legal or financial advice. MATCH program rules, chargeback thresholds, and Visa VAMP requirements are subject to change; verify current standards with Mastercard's Security Rules and Procedures (Merchant Edition) and Visa's VAMP Fact Sheet before relying on specific figures. If you are facing a MATCH listing or chargeback enforcement action, consult a payments attorney or compliance specialist.
Kaleb Dickhaut — Founder, ClickWerxs. Kaleb works directly with merchants to identify and eliminate unnecessary payment processing costs.
linkedin.com/in/kaleb-dickhaut
Sources
- Card network monitoring thresholds — Visa's Acquirer Monitoring Program (VAMP) replaced the Visa Dispute Monitoring Program and Visa Fraud Monitoring Program effective 1 April 2025 and measures fraud reports and disputes combined; the merchant Excessive threshold is 1.50% above a floor of 1,500 combined events per month as of 1 April 2026. Mastercard's Excessive Chargeback Merchant tier is 100 chargebacks and 150 basis points. Visa distributes VAMP terms through acquirer bulletins rather than a public page; confirm current thresholds with your acquirer.
- Processing rates, fee ranges and effective-rate figures in this post are industry-typical ranges compiled from published network schedules and from accounts reviewed in the ClickWerxs ISO portfolio. They are not quoted rates. Interchange itself is set by Visa and Mastercard on published schedules that change twice yearly; your actual cost depends on card mix, MCC, ticket size and volume.
- ClickWerxs ISO portfolio, aggregate observation — patterns described from merchant accounts under ClickWerxs management. Anonymized and reported in aggregate; individual account terms vary. Operator data.
ClickWerxs facilitates merchant account applications and provides ongoing account management as an authorized representative of our banking and processing partners. Approval, rates, and terms are determined by the issuing processor and acquiring bank — ClickWerxs does not guarantee approval for any merchant account application. Processing rates and fee structures cited in this post reflect publicly available industry data and general ranges; your actual rate depends on your industry, volume, and card mix. This post is not legal or financial advice. For a custom quote, see clickwerxs.com/payments/get-a-quote.
