Mastercard

ECM / ECP

Excessive Chargeback Merchant / Excessive Chargeback Program. Long-standing chargeback-only monitoring.

MeasuresChargebacks only
ECP entry≥ 1.00% + 100/mo
ECM entry≥ 1.50% + 100/mo
Volume floor100 chargebacks/mo
Exit3 consecutive months
Visa · Effective Apr 1, 2025

VAMP

Visa Acquirer Monitoring Program. Combined fraud + dispute ratio. Replaced VDMP and VFMP.

MeasuresFraud + disputes (combined)
Above-Standard≥ 0.30%
Excessive≥ 0.90%
Volume floorNone
Exit3 consecutive months

The TL;DR

VAMP and ECM are not redundant and are not interchangeable. They measure different things, on different networks, with different volume floors. A subscription app in trouble on Visa is often in trouble on Mastercard too, but the timing of enrollment and the precise remediation track differ. The most important practical difference: VAMP has no volume floor and ECM does. Small merchants typically cross VAMP first; large merchants with concentrated chargebacks may hit ECM faster.

Full side-by-side

AttributeMastercard ECMVisa VAMP
NetworkMastercardVisa
What it measuresChargebacks ÷ transactions(Fraud + chargebacks) ÷ settled transactions
Fraud reports counted?No (separate program: EFM)Yes (TC40 reports)
Entry threshold (lower tier)ECP: 1.00% chargeback ratio + 100 chargebacks/moAbove-Standard: 0.30% combined ratio
Entry threshold (upper tier)ECM: 1.50% chargeback ratio + 100 chargebacks/moExcessive: 0.90% combined ratio
Volume floor100 chargebacks/month — protects smaller merchantsNone — applies at any volume
Lower-tier consequencesAcquirer monitoring + remediation planAcquirer monitoring + remediation plan
Upper-tier consequencesPer-dispute assessments + formal enrollmentPer-dispute assessments + offboarding risk
Exit windowBelow threshold for 3 consecutive monthsBelow threshold for 3 consecutive months
EffectiveLong-standing (years)April 1, 2025 (replaced VDMP and VFMP)
Nuclear outcomeMATCH list (5-year ban)Acquirer offboarding + Visa disqualification
Measurement cadenceMonthlyMonthly
Reporting transparency to merchantsThrough acquirer; limited direct visibilityCurrently through acquirer; Visa has signaled direct merchant reports may come in 2026

Where the structural difference matters most

For small subscription apps (≤ 50K monthly transactions)

VAMP is almost always the more pressing program. A small merchant with ~5,000 transactions and just 16 combined fraud-plus-disputes is at 0.32% — above the VAMP Above-Standard threshold — while having nowhere near the 100-chargeback ECM floor. Small merchants can be fully under VAMP enforcement while ECM is functionally inert.

For large subscription apps (≥ 500K monthly transactions)

Both programs can trip near-simultaneously, but ECM's percentage threshold (1.50% for full ECM) is higher than VAMP's 0.90% Excessive — so VAMP typically hits Excessive first. ECM full enrollment usually arrives a few weeks behind because the chargeback ratio takes longer to push to 1.50%.

For subscription apps with concentrated fraud (high TC40, moderate disputes)

VAMP punishes fraud more directly than ECM. ECM only measures chargebacks; fraud transactions that didn't crystallize into chargebacks don't count toward ECM ratio. VAMP combines both. An app with elevated card-testing or stolen-card fraud will see VAMP climb faster than ECM.

For subscription apps with concentrated friendly fraud (high disputes, low fraud)

ECM and VAMP move at similar rates here because disputes count toward both. The remediation work overlaps almost entirely: better billing descriptor, clearer renewal notifications, self-serve refund flow, Ethoca and Verifi dispute interception.

Severity comparison

OutcomeECM pathVAMP path
Early warningECP enrollment at 1.00% + 100/moAbove-Standard at 0.30% combined
Full program enrollmentECM at 1.50% + 100/moExcessive at 0.90% combined
Per-dispute finesYes, in ECMYes, in Excessive
Direct offboarding riskPossible after sustained ECMPossible after sustained Excessive
MATCH placementYes — reason code 12 (excessive chargebacks)No direct MATCH placement, but offboarding from VAMP-Excessive can trigger MATCH via the acquirer
Cross-network impactMATCH is queried by Visa during onboardingVAMP enforcement is Visa-only but acquirers often share risk signals informally

Real-world scenarios

Scenario A: Series A subscription app, 8K monthly transactions, 40 chargebacks, 12 TC40 fraud reports

Mastercard ECM: 40 ÷ 8,000 = 0.50% chargeback ratio. Below the 1.00% ECP threshold. But more importantly, 40 chargebacks is below the 100-chargeback volume floor — ECM cannot enroll. Safe on Mastercard.

Visa VAMP: (12 + 40) ÷ 8,000 = 0.65% combined ratio. Above the 0.30% Above-Standard threshold. Acquirer monitoring active. ~25 basis points below Excessive (0.90%).

Practical move: Focus rescue work on VAMP. ECM is structurally inert at this volume.

Scenario B: Series B subscription app, 200K monthly transactions, 1,900 chargebacks, 800 TC40 fraud reports

Mastercard ECM: 1,900 ÷ 200,000 = 0.95% chargeback ratio with well over 100 chargebacks. Approaching ECP at 1.00%; full ECM still well off at 1.50%.

Visa VAMP: (800 + 1,900) ÷ 200,000 = 1.35% combined ratio. Above Excessive (0.90%) by 45 basis points. Per-dispute assessments active.

Practical move: VAMP Excessive is the urgent fire. Structural fixes will pull ECM back from the 1.00% ECP threshold simultaneously.

Scenario C: Series C subscription app, 1M monthly transactions, 18,000 chargebacks, 2,000 TC40 fraud reports

Mastercard ECM: 18,000 ÷ 1,000,000 = 1.80% chargeback ratio. Squarely above ECM threshold of 1.50%. Per-dispute assessments active. Real MATCH risk if not remediated.

Visa VAMP: (2,000 + 18,000) ÷ 1,000,000 = 2.00% combined ratio. Far above Excessive (0.90%). Severe enforcement on both programs simultaneously.

Practical move: Both programs are full-enforcement. The 90-day rescue program runs ECM and VAMP exit work in parallel because the structural fixes overlap.

Volume floor implication. The single most underappreciated structural difference between the two programs is the absence of a VAMP volume floor. Small subscription apps that comfortably ignored Mastercard ECM (because 100-chargeback floor protected them) often find themselves in VAMP enforcement immediately on the April 2025 cutover or shortly after. Many founders learn about VAMP through their first acquirer notification — not by reading the documentation in advance.

Use the calculator

To estimate your own current position against both programs simultaneously, use the interactive tool: Open the calculator →

Read next

Georges Rayess
About the author

Georges Rayess drove the chargeback rate at a privacy-focused subscription mobile app from 13% to below 1% and exited Mastercard ECM with compliance documents accepted by the processor on first submission. Connect on LinkedIn.

In one or both programs?

Get a structured exit plan

The 90-day rescue program runs ECM and VAMP exit work in parallel — the structural fixes overlap, but the documentation is per-network.

Book an Intro Call → See the Rescue Program