ECM Exit Guide
The 90-day playbook to exit Mastercard ECM, including the five chargeback root causes.
Read →
Comparison · Mastercard vs Visa
Mastercard ECM vs Visa VAMP
Side-by-side comparison of the two card network monitoring programs that most subscription apps will encounter. Thresholds, formulas, volume floors, exit criteria, severity, and remediation playbooks — verified against Visa's VAMP fact sheet and acquirer documentation as of 10 June 2026, including the April 1, 2026 VAMP threshold reduction.
Mastercard
ECP (ECM / HECM)
Excessive Chargeback Program — the program; its tiers are ECM and HECM. Long-standing chargeback-only monitoring.
MeasuresChargebacks only
ECM tier100–299/mo + 1.5–2.99%
HECM tier≥ 300/mo + ≥ 3.0%
Count floor100 chargebacks/mo
Exit3 consecutive months
Visa · Effective Jun 1, 2025
VAMP
Visa Acquirer Monitoring Program. Combined fraud + dispute ratio. Replaced the retired VDMP and VFMP.
MeasuresFraud + disputes (combined)
Excessive (merchant)≥ 1.5% (CEMEA 2.2%)
Acquirer tiers0.5% / 0.7%
Activity gate1,500 fraud+disputes/mo
ExitReassessed monthly
The TL;DR
VAMP and ECM are not redundant and are not interchangeable. They measure different things, on different networks, with different activity gates. A subscription app in trouble on Visa is often in trouble on Mastercard too, but the timing of enrollment and the precise remediation track differ. The most important practical difference: ECM's count floor is 100 chargebacks; VAMP only applies once you record 1,500 fraud-plus-dispute transactions in a month (CEMEA: 150 plus USD 75,000). Mid-size merchants typically trip ECM first; high-volume card-not-present merchants face VAMP's 1.5% Excessive line.
April 2026 change. On April 1, 2026 Visa reduced the VAMP merchant Excessive threshold from 2.2% to 1.5% in AP, Canada, EU, and US (LAC was already 1.5%; CEMEA remains 2.2%). Source: Visa VAMP fact sheet (PDF). All VAMP figures below reflect the post-April-2026 thresholds.
Full side-by-side
| Attribute | Mastercard ECM | Visa VAMP |
|---|---|---|
| Network | Mastercard | Visa |
| What it measures | Current-month chargebacks ÷ preceding month's captured transactions | Count of (TC40 fraud + TC15 disputes) ÷ settled CNP transactions |
| Fraud reports counted? | No (separate program: EFM) | Yes (TC40 reports; RDR/CDRN and CE 3.0 excluded) |
| Entry threshold (lower tier) | ECM: 100–299 chargebacks/mo + 1.5%–2.99% | Single merchant tier — see below |
| Entry threshold (upper tier) | HECM: ≥300 chargebacks/mo + ≥3.0% | Excessive: 1.5% combined ratio (CEMEA 2.2%) |
| Activity gate | 100 chargebacks/month — protects smaller merchants | 1,500 fraud+disputes/month (CEMEA: 150 + USD 75,000) |
| Lower-tier consequences | ECM fines from month 2 ($1,000) scaling to $100,000 at month 19+ | Acquirer monitoring + remediation plan (acquirer tiers: 0.5% / 0.7%) |
| Upper-tier consequences | HECM fines: $100k months 12–18, $200k month 19+; plus $5 Issuer Recovery Assessment per chargeback above 300 from month 4 | Remediation + offboarding risk; per-transaction assessments per acquirer advisories |
| Exit window | Below thresholds for 3 consecutive months | Reassessed monthly — Visa publishes no multi-month window |
| Effective | Long-standing (years) | June 1, 2025; enforcement Oct 1, 2025; threshold cut to 1.5% Apr 1, 2026 (replaced retired VDMP/VFMP) |
| Nuclear outcome | MATCH list (5-year ban) | Acquirer offboarding + Visa disqualification |
| Measurement cadence | Monthly | Monthly |
| Reporting transparency to merchants | Through acquirer; limited direct visibility | Currently through acquirer; Visa has signaled direct merchant reports may come in 2026 |
Where the structural difference matters most
For small subscription apps (≤ 50K monthly transactions)
Neither program bites immediately. A small merchant with a few dozen monthly chargebacks sits below ECM's 100-chargeback floor and far below VAMP's 1,500 fraud-plus-dispute activity gate. The first network program a growing app usually trips is Mastercard ECM, because its 100-chargeback floor arrives long before VAMP's 1,500-count gate. The acquirer's own internal thresholds typically tighten well before either network steps in.
For large subscription apps (≥ 500K monthly transactions)
Both programs can trip near-simultaneously. Both enforcement lines now sit at the same headline ratio — 1.5% — but they count different things: ECM is chargebacks only against the preceding month's transactions; VAMP adds TC40 fraud reports on top of disputes. A merchant with meaningful fraud volume will therefore see the VAMP ratio run higher than the Mastercard chargeback ratio and cross 1.5% first.
For subscription apps with concentrated fraud (high TC40, moderate disputes)
VAMP punishes fraud more directly than ECM. ECM only measures chargebacks; fraud transactions that didn't crystallize into chargebacks don't count toward ECM ratio. VAMP combines both. An app with elevated card-testing or stolen-card fraud will see VAMP climb faster than ECM.
For subscription apps with concentrated friendly fraud (high disputes, low fraud)
ECM and VAMP move at similar rates here because disputes count toward both. The remediation work overlaps almost entirely: better billing descriptor, clearer renewal notifications, self-serve refund flow, Ethoca and Verifi dispute interception.
Severity comparison
| Outcome | ECM path | VAMP path |
|---|---|---|
| Early warning | ECM tier at 100–299 chargebacks + 1.5%–2.99% | Acquirer Above Standard at 0.5% (portfolio level) |
| Full program enrollment | HECM tier at ≥300 chargebacks + ≥3.0% | Merchant Excessive at 1.5% combined (CEMEA 2.2%), with ≥1,500 fraud+disputes/mo |
| Fines | Monthly fine schedule from month 2, plus $5/chargeback above 300 from month 4 | Per-transaction assessments at Excessive, per acquirer advisories |
| Direct offboarding risk | Possible after sustained ECM | Possible after sustained Excessive |
| MATCH placement | Yes — reason code 12 (excessive chargebacks) | No direct MATCH placement, but offboarding from VAMP-Excessive can trigger MATCH via the acquirer |
| Cross-network impact | MATCH is queried by Visa during onboarding | VAMP enforcement is Visa-only but acquirers often share risk signals informally |
Real-world scenarios
Scenario A: Series A subscription app, 8K monthly transactions, 40 chargebacks, 12 TC40 fraud reports
Mastercard ECM: 40 ÷ 8,000 = 0.50% chargeback ratio. Below the 1.5% ECM band, and 40 chargebacks is below the 100-chargeback floor — ECM cannot enroll. Safe on Mastercard.
Visa VAMP: (12 + 40) ÷ 8,000 = 0.65% combined ratio, but only 52 fraud-plus-dispute transactions — far below VAMP's 1,500 minimum-count gate, and below the 1.5% line anyway. Outside VAMP scope.
Practical move: Neither network program applies yet. The binding constraint at this volume is the acquirer's internal thresholds — fix root causes before growth pushes you over ECM's 100-chargeback floor.
Scenario B: Series B subscription app, 200K monthly transactions, 1,900 chargebacks, 800 TC40 fraud reports
Mastercard ECM: 1,900 ÷ 200,000 = 0.95% chargeback ratio. Chargeback count is far above 100, but the ratio is below the 1.5% ECM band — not enrolled, though trending toward it.
Visa VAMP: (800 + 1,900) ÷ 200,000 = 1.35% combined ratio with 2,700 fraud-plus-disputes — well above the 1,500 activity gate. Only 15 basis points below the 1.5% Excessive line.
Practical move: VAMP is the urgent target — one bad month crosses 1.5%. The same structural fixes pull the Mastercard ratio away from the ECM band simultaneously.
Scenario C: Series C subscription app, 1M monthly transactions, 18,000 chargebacks, 2,000 TC40 fraud reports
Mastercard ECM: 18,000 ÷ 1,000,000 = 1.80% chargeback ratio — inside the ECM ratio band (1.5%–2.99%) with the chargeback count far above the floor. Monthly fines escalate from month 2, plus the $5 Issuer Recovery Assessment per chargeback above 300 from month 4. Real MATCH risk if not remediated.
Visa VAMP: (2,000 + 18,000) ÷ 1,000,000 = 2.00% combined ratio with 20,000 fraud-plus-disputes — above the 1.5% Excessive line. Severe enforcement on both programs simultaneously.
Practical move: Both programs are full-enforcement. The 90-day rescue program runs ECM and VAMP exit work in parallel because the structural fixes overlap.
Activity-gate implication. The single most underappreciated structural difference between the two programs is the size of the gates: ECM enrollment starts at just 100 chargebacks a month, while VAMP's merchant ratio only applies from 1,500 fraud-plus-dispute transactions a month (CEMEA: 150 plus USD 75,000). A growing subscription app usually meets Mastercard's floor years before Visa's gate. Many founders still learn about VAMP through their first acquirer notification — not by reading the documentation in advance.
Use the calculator
To estimate your own current position against both programs simultaneously, use the interactive tool: Open the calculator →
Read next
- → How to Exit Mastercard's ECM Program — full operator guide
- → Visa VAMP Explained — full operator guide
- → Every card network monitoring program subscription apps need to know
- → Live threshold tracker (VAMP, ECM, ECP, Amex, Discover)
- → Stripe Radar Rules That Actually Reduce Chargebacks
- → 90-Day Chargeback Rescue program
About the author
Georges Rayess drove the chargeback rate at a privacy-focused subscription mobile app from 13% to below 1% and exited Mastercard ECM with compliance documents accepted by the processor on first submission. Connect on LinkedIn.
In one or both programs?
Get a structured exit plan
The 90-day rescue program runs ECM and VAMP exit work in parallel — the structural fixes overlap, but the documentation is per-network.
Watch · walkthrough
Mastercard ECM vs Visa VAMP: Which Trips Your Subscription App First?
Mastercard's ECM and Visa's VAMP measure different things on different networks — and your subscription app usually trips one well before the other. I break ...Video transcript
Note: this video was recorded before the April 2026 threshold update. Corrected figures as of 10 June 2026 — Mastercard's ECP tiers are ECM (100–299 chargebacks and a 1.5%–2.99% ratio) and HECM (300+ and 3.0%+); Visa VAMP has a single merchant tier, Excessive, at 1.5% (CEMEA 2.2%) with a 1,500 fraud-plus-dispute monthly minimum. The comparison tables above carry the current numbers.
ECM versus VAMP — two card-network monitoring programs that most subscription apps will meet, and the one you usually trip first. On the Mastercard side is the ECP program. It measures chargebacks only, with both a count floor and a ratio band per tier; the 100-chargeback floor is what protects smaller merchants.
On the Visa side is VAMP, the Visa Acquirer Monitoring Program. It measures fraud plus disputes combined and replaced the retired VDMP and VFMP, with its own minimum-activity gate before the merchant ratio applies.
Take a small app — 8,000 transactions, 40 chargebacks, 12 fraud reports. With only 40 chargebacks it sits below Mastercard's 100-chargeback floor, and its 52 fraud-plus-disputes sit below VAMP's activity gate — neither network program enrolls it yet.
Now a large app — one million transactions, 18,000 chargebacks, 2,000 fraud reports. The Mastercard ratio is 1.80% with the count far above the floor, with real MATCH-list risk. The VAMP combined ratio is 2.00%, above the Excessive line. At scale, both programs trip.
The good news is the fixes overlap. Rebuild your Stripe Radar rules and add dynamic 3-D Secure gating. Intercept disputes with Ethoca and Verifi. Fix the billing descriptor and renewal notifications. Then stay under threshold for three straight months to exit — each program separately. It's the same structural work; only the exit paperwork is per-network. Know your fire: the full side-by-side and a calculator for both programs live at georgesrayess.com/fraud/ecm-vs-vamp.