regulatory 2026-04-18 11 min read the underwriting desk

Visa Integrity Risk Program (VIRP) explained for 2026

3-minute scan
  • VIRP consolidated Visa's legacy dispute monitoring programs (VIP, VDMP) into a single integrity-focused framework.
  • Thresholds: 0.9% dispute ratio or $75k disputes and 75 disputes per month = early warning; 1.5% or 1000+ disputes = standard monitoring.
  • Merchants in VIRP face remediation requirements, monthly reporting, and potential fines $25k-$100k+.
On this page

    The Visa Integrity Risk Program (VIRP) replaced the Visa Dispute Monitoring Program (VDMP) and Visa Integrity Program (VIP) in 2023. If you operate a merchant account in 2026 with any meaningful chargeback exposure, VIRP is the framework that determines whether Visa considers you a "problem merchant" and what happens next.

    1. What VIRP is

    VIRP is Visa's tiered monitoring program for merchants with elevated dispute activity or compliance concerns. It replaces overlapping legacy programs with one integrated framework. Acquirers receive monthly VIRP reports on merchant activity; qualifying merchants are enrolled automatically and face escalating remediation requirements.

    2. Thresholds that matter in 2026

    Early Warning tier: 0.9% dispute ratio and 75+ disputes in a month, OR $75,000+ in disputed volume with 75+ disputes.

    Standard tier: 1.5% dispute ratio and 100+ disputes, OR $250,000+ in disputed volume with 100+ disputes.

    Excessive tier: 1.8% dispute ratio and 1,000+ disputes, OR $500,000+ in disputed volume with 1,000+ disputes.

    Thresholds and exact math vary by Visa's quarterly updates; your acquirer should surface this in your statement.

    3. What happens at each tier

    Early Warning: Notification, no immediate consequences. Acquirer typically requires merchant to submit a remediation plan.

    Standard: Enhanced monitoring, monthly remediation reporting required, mandatory reduction targets, potential reserve increase.

    Excessive: Visa fines $25,000-$100,000+, mandatory 3DS enablement, significant reserve increases, risk of acquirer termination.

    4. How chargeback ratio is calculated

    Ratio = (Disputes received in month) / (Transactions in the PRECEDING month). The lag matters — a January dispute counts against December transaction volume. Operators who do not understand this miscalculate where they stand relative to thresholds.

    5. First-party fraud (friendly fraud) counts

    VIRP does not distinguish between genuine fraud and friendly fraud. Both count. Operators with high friendly fraud from subscription billing or digital goods are as exposed as operators with actual fraud.

    6. How to stay out of VIRP

    • Monitor dispute ratio weekly. Alert at 0.7% to get ahead of 0.9% threshold.
    • Clear descriptor with support phone number.
    • Easy refund path (often prevents dispute).
    • 3DS step-up on risky transactions.
    • Fast dispute response and representment.
    • Clear subscription cancellation path.

    7. If you are enrolled

    Acquirer will notify you. Required actions: submit remediation plan within 30 days, monthly reporting on chargeback reduction efforts, cooperation with any Visa-requested audits. Non-cooperation triggers higher tier + fines.

    8. Fraud tool deployment

    Enrolled merchants typically mandated to enable Verified by Visa (3DS) and sometimes Visa Decision Manager. Stripe Radar, Kount, Signifyd all support the program requirements. Budget for tool cost 0.3-1% of volume.

    9. Mastercard Excessive Chargeback Program (ECP)

    Mastercard's equivalent — similar thresholds, similar remediation. 1.5% count ratio or 100+ chargebacks triggers early warning. Both card brands track independently; a merchant can be in one and not the other.

    10. Termination risk

    Excessive tier enrollment for 12 months typically results in acquirer termination + MATCH listing. Termination for "excessive chargebacks" is MATCH Reason Code 04 — hard to escape. See MATCH list playbook.

    11. How to exit the program

    Reduce dispute ratio below threshold for 3 consecutive months. Acquirer and Visa review. Typical exit timeline 6-12 months for operators who address root causes.

    12. Multi-brand implications

    VIRP is at the MID level. One brand in VIRP does not drag other brands in. But the operator's reputation across acquirers suffers if multiple brands hit VIRP over time. Structural fix is addressing the disputation pattern, not just surviving one enrollment.

    Prevention checklist

    • Weekly dispute ratio monitoring.
    • Alert at 0.7% (before 0.9% threshold).
    • Descriptor with brand + phone.
    • Easy refund and cancellation flow.
    • 3DS on risky transactions.
    • Fast dispute response (under 24 hours).
    • Fraud tool tuning quarterly.
    • Product and CS audit when rate climbs.

    What a VIRP enrollment costs

    Direct: $25k-$100k+ in Visa fines at higher tiers. Indirect: operator time on remediation, increased reserve, potential termination. Net cost often $100-500k for a year in the program. Prevention is cheaper.

    Acquirer reporting obligations

    Your acquirer must report to Visa monthly. They have financial incentive to avoid your VIRP enrollment because Visa fines cascade to acquirers. A good AOR rep will flag early warning before you trip threshold. If they are not watching for you, they are not a good rep.

    The durable answer

    Operators who stay out of VIRP run dispute monitoring as a weekly ritual and tune the stack continuously. See chargeback ratio guide, CFO weekly review, pricing, or apply for a dispute risk audit on your current stack.

    13. The "high-brand acceptance" tier

    Visa has introduced tiered enrollment within VIRP. "High-brand acceptance" merchants (typically over $100M volume with consistent patterns) face slightly different thresholds and different remediation expectations. Enterprise operators may be eligible for this tier, which preserves commercial flexibility during review.

    14. Cross-processor VIRP aggregation

    VIRP is at the MID level. If you run 3 MIDs, each has its own VIRP standing. However, Visa increasingly tracks operator-level patterns — a merchant terminated under VIRP on MID A struggles to place MID B at another acquirer. The correlation is watched.

    15. Remediation plan template

    (a) Root cause: specific identified driver of chargeback increase.

    (b) Changes implemented: policy, product, process.

    (c) Timeline: week-by-week targets.

    (d) Monitoring: what you will report to acquirer monthly.

    (e) Outcome criteria: specific thresholds that define successful remediation.

    Signed by principal; submitted to acquirer.

    16. What acquirers see

    Acquirers receive monthly VIRP reports with merchant-level detail. They have financial incentive to help you exit program (acquirer fines cascade). A helpful acquirer proactively coaches you; a disengaged one waits for outcomes. AOR rep quality matters most during VIRP.

    Found this useful? Share it X LinkedIn Reddit HN Email

    FAQ

    How do I know if I am in VIRP?
    Your acquirer notifies you. Your statement may show VIRP enrollment. Some acquirers surface it in dashboards; others bury it in notices.
    Is VIRP a blacklist?
    No — it is a remediation program. MATCH is the blacklist. VIRP is one path that can lead to MATCH via termination but is not itself MATCH.
    Can I appeal VIRP enrollment?
    No real appeal. Enrollment is based on data. You exit by reducing dispute ratio below threshold.
    Does Mastercard have the same program?
    Mastercard's ECP is similar. Both track independently with different thresholds.
    What does remediation plan look like?
    Documented changes to fraud controls, descriptor, refund policy, customer service — signed by operator. Monthly reporting on progress. Acquirer reviews.

    Running multiple brands?
    multiflow was built for this.

    The Operator Briefing

    Twice-monthly. No fluff.

    Processor shutdowns, reserve-hold playbooks, reconciliation lessons, and the merchant-account decisions that save operators six-figure years. Delivered to your inbox — never spam.

    No spam. Unsubscribe in one click.

    We use essential cookies · Privacy