Friendly Fraud vs. True Fraud: How to Tell the Difference

Two chargebacks can carry the same fraud reason code and still need opposite responses. Here is how merchants separate first-party misuse from criminal fraud, and what to do about each.

Two chargebacks land in your dashboard on the same morning. Both carry a fraud reason code, and both say the cardholder didn't authorize the purchase. One came from a criminal using a stolen card number. The other came from your own customer, who bought the product, used it, and then asked their bank for the money back. On paper, they look identical, but fighting the wrong one wastes fees, and ignoring the wrong one gives away revenue while your chargeback ratio climbs toward network thresholds. 

This guide shows how to tell friendly fraud from true fraud, which signals give each away, and what a practical friendly fraud prevention plan looks like for merchants.

Two Kinds of Fraud, Two Different Culprits

The fastest way to separate them is one question: who made the purchase? With true fraud (third-party fraud), someone other than the cardholder used stolen payment details from a data breach, a phishing scam, a skimmed terminal or an account takeover. The real cardholder spots a charge they don't recognize, and their dispute is legitimate. They never saw your product.

With friendly fraud, the cardholder made the purchase, or someone in their household did, and disputes it anyway. Visa calls this first party misuse, a term that puts the focus where it belongs: the person filing the dispute received the goods or service. The word "friendly" undersells the cost. These chargebacks hit merchants as hard as criminal fraud, and they are harder to stop at checkout because the transaction looks normal when it happens.

‍

The numbers behind friendly fraud chargebacks

Card disputes worldwide were projected at 261 million in 2025, rising to 324 million by 2028 (Datos Insights and Mastercard, 2025).

Datos Insights projects first-party fraud cases growing from 30.6 million in 2025 to 38.2 million by 2028 (Datos Insights, 2025).

Friendly fraud accounts for 43.8% of the chargebacks merchants absorb, and 83.4% of enterprise merchants saw it increase over the past three years (Chargebacks911, 2026 Chargeback Field Report, September 2026).

The same report puts merchants' average net recovery rate on contested friendly fraud chargebacks at just 10.7% once second-cycle chargebacks are counted (Chargebacks911, September 2026).

‍

The Three Faces of Friendly Fraud

Not every friendly fraud chargeback comes from a dishonest customer. Most fall into one of three groups, and the group decides your response.

1. Honest Confusion

The customer doesn't recognize the charge. Common causes are a billing descriptor that doesn't match your brand name, a free trial that converted without a reminder, a forgotten subscription renewal, or a charge that posted days later in a different amount after currency conversion. These customers would usually accept a refund or an explanation if they could reach you before their bank.

2. Household or Family Use

A child buys in-game currency on a parent's saved card, or a partner orders on a shared account. The cardholder doesn't remember the purchase and disputes it as unauthorized, even though someone with access to the card made it.

3. Deliberate Abuse

The smallest group does the most damage. The customer knows the purchase was theirs and disputes it to keep the product for free: claiming non-delivery when tracking shows delivery, disputing a digital purchase after using it, or filing a chargeback instead of cancelling. A customer who wins once is likely to try again.

Friendly Fraud vs. True Fraud at a Glance

‍

True fraud is mainly a prevention problem at checkout. Friendly fraud is mainly a communication and evidence problem after the sale.

How to Tell The Difference: 7 Signals to Check

When a fraud-coded chargeback arrives, don't take the reason code at face value. The more of these signals point to an existing, engaged customer, the more likely you are looking at first party misuse.

1. Device and IP History

Has this device fingerprint or IP address appeared on earlier, undisputed purchases with the same card? A match is one of the strongest friendly fraud indicators, and it is the basis of Visa's Compelling Evidence 3.0 rules.

2. Account Age and Order History

A customer with a year of clean orders who disputes one purchase behaves very differently from a new account that placed three high-value orders in an hour.

3. Address Consistency

Does the shipping address match past orders and the billing address on file? Criminals often ship to drop addresses or freight forwarders.

4. Authentication Results

A payment approved with 3-D Secure, a one-time passcode, or biometric login makes an "I didn't authorize this" claim much harder to sustain.

5. Proof of Use or Delivery

For digital goods: logins, downloads, playtime or usage after the purchase date. For physical goods: carrier tracking with delivery confirmation and, where possible, a signature.

6. Contact Before the Dispute

A customer who emailed support or tried to cancel before calling the bank is usually confused or frustrated, not a criminal.

7. Dispute History

Repeat disputes tied to the same card, email, or device are a classic sign of deliberate abuse. Record what you find on every case, because the same data becomes your evidence if you decide to fight.

Why Misreading a Chargeback Costs More Than One Sale

Treating friendly fraud as criminal fraud usually means adding checkout friction: stricter rules, more manual review, more declines. That blocks good customers and lowers approval rates while the real cause, such as a confusing descriptor or a hidden cancel button, stays in place.

‍

It also skews your dispute effort. True fraud claims are hard to overturn, while friendly fraud disputes are often winnable with the right records. And every chargeback counts toward the ratios Visa and Mastercard monitor, whatever its cause. Cross the thresholds, and you face monitoring programs, higher fees, and, in the worst case, a terminated merchant account.

How to Respond to Each Type

‍

Visa's Compelling Evidence 3.0 rules, in effect since April 2023, invalidate a fraud dispute under reason code 10.4 when the merchant shows the cardholder took part in the transaction (Visa, March 2023). In practice, that means two earlier undisputed transactions on the same card, 120 to 365 days old, that share key data such as device ID or IP address with the disputed one.

Friendly Fraud Prevention Checklist for Merchants

The cheapest friendly fraud chargeback is the one that is never filed. Use this checklist to find the gaps in your current setup. For the wider dispute playbook, see our guide to reducing chargebacks for high-risk merchants.

‍

Billing clarity

• Billing descriptor matches the brand name customers know and includes a support phone number or URL
• Email receipt sent for every charge, including renewals
• Amounts shown in the customer's currency where possible

Recurring billing

• Trial length, renewal date and price stated clearly at checkout
• Reminder sent a few days before a trial converts or an annual plan renews
• Self-serve cancellation that is as easy as sign-up

Customer service

• Support contact details on receipts, invoices and the account page
• Refund requests answered within one business day
• Refunds offered for clear-cut confusion cases, since a refund costs less than a chargeback

Pre-dispute tools

• Enrolled in Visa Order Insight, Mastercard Consumer Clarity, Ethoca alerts or Verifi Rapid Dispute Resolution

Evidence capture

• Device fingerprint, IP address and authentication results logged on every transaction
• Logins, downloads and usage recorded for digital products
• Delivery confirmation and customer messages stored with each order

Account controls

• Re-authentication required for saved-card and in-app purchases, especially in family apps
• Spending limits or parental controls where children may have access

Friendly Fraud Chargebacks: Frequently Asked Questions

1. Is friendly fraud illegal?

It depends on intent. A customer who forgot a subscription hasn't committed a crime, while one who knowingly disputes a purchase to keep the product may be committing fraud, though it is rarely prosecuted. For merchants, the useful question is whether the dispute can be prevented or won.

2. What is the difference between friendly fraud and first party misuse?

They describe the same behavior. First party misuse is the term Visa uses, while Mastercard and many processors also say friendly fraud or first-party fraud.

3. Can merchants win friendly fraud chargebacks?

Yes, with good records: proof of delivery or use, device and IP history, and customer communications. Recovery rates stay low for merchants without that data, which is why evidence capture and pre-dispute tools matter as much as representment.

4. Do friendly fraud chargebacks count toward my chargeback ratio?

Yes. Card network monitoring programs count every chargeback regardless of cause, so prevention matters even if you win most disputes.

5. Which industries see the most friendly fraud?

Digital goods, subscriptions, gaming and in-app purchases, travel and online retail are most exposed, because purchases are easy to forget, easy to share with family members, or hard to return in the usual sense. Game subscriptions are a common example, covered in our guide to game subscription payment processing, churn and chargebacks.