Back to Insights
High-Risk Merchants

TC40 and SAFE Data Explained: The Fraud Reports Feeding Your VAMP Ratio

TC40 and Mastercard SAFE feel like chargebacks, but they are fraud reports. They quietly feed your VAMP and EFM ratios long before a dispute ever lands.

Published · 4 min read
Share

Most high-risk merchants meet TC40 data the hard way. An acquirer flags a rising fraud rate, or a monitoring notice lands, and the numbers do not match the chargebacks they have actually fought. That gap is TC40 data: a fraud signal that moves before a single dispute is filed, and counts against you whether or not the dispute ever arrives. If you are still working out how to spot fraud before it becomes a chargeback, this is the data layer sitting underneath that fight.

A TC40 is a fraud report, not a chargeback

When a cardholder tells their bank a Visa transaction was not authorized, the issuer generates a TC40 data claim and sends it to Visa’s Risk Identification Service (RIS). It is a report, not a reversal. No money moves, and the TC40 does not stop or replace the chargeback. The same transaction can produce a TC40 today and a fraud chargeback weeks later, or a TC40 and no chargeback at all if the cardholder never pursues it.

That timing is the point. The TC40 is released within days of the fraud report, long before a dispute works its way through the system.

A fraud report is not a reversalTC40 / SAFE versus a chargeback
 TC40 / SAFE reportChargeback
What it isFraud notification to the networkReversal of funds
Money moves?NoYes
TimingWithin days of the fraud claimWeeks later, if at all
Who acts on itAcquirer, risk teams, alert feedsYour disputes team
Counts towardVAMP / EFM fraud ratioVAMP / EFM dispute ratio

Mastercard’s version is SAFE, now the FLD

Mastercard runs the same play through SAFE, the System to Avoid Fraud Effectively. Since 2020 it has technically been folded into the Fraud and Loss Database (FLD), though the industry still says “SAFE alerts.” The mechanics are identical: issuers report fraud, the network aggregates it, and your acquirer reads your risk profile through that lens.

A TC40 costs you nothing today and everything later. It is the number your acquirer watches, not the one you dispute.

How the reports feed VAMP and EFM

Here is why they matter more than most merchants realise. TC40 and SAFE data are the raw fraud inputs for the networks’ monitoring programs. Under Visa’s VAMP, the ratio that decides your standing is fraud plus disputes divided by card-not-present transactions, and the fraud half of that equation is measured through TC40 reports. So your VAMP ratio can climb on TC40 volume alone, before a wave of chargebacks ever lands.

1.5%
▼ from 2.2% on 1 Apr 2026
Merchant “Excessive” VAMP ratio
$8
Visa fine per fraud or dispute transaction at Excessive
3 months
Grace on a first breach in a rolling 12 months

Mastercard’s Excessive Fraud Merchant (EFM) program, part of its Acquirer Chargeback Monitoring Program, works the same way: cross its fraud thresholds and monthly violation fines start stacking. In both schemes, SAFE and TC40 counts can put you in a program before your dispute ratio ever looks alarming.

Use the alerts, but know their limits

Because TC40 and SAFE fire early, they are useful. Acquirers and alert providers (the Verifi and Ethoca networks) resell this fraud data so you can refund a flagged order before it becomes a chargeback, protecting both your dispute ratio and your fraud ratio. The same early signal strengthens your defence against friendly fraud, which now drives most disputes. Acted on quickly, an alert is a chance to cut a loss short.

Warning

TC40 data is noisy. It lags, duplicates, and includes transactions you may have already refunded, so it is a directional risk signal, not a clean ledger. Treat it as an early-warning feed to investigate, not a bill to pay line by line.

The Bottom Line

If you only track chargebacks, you are watching the wrong number. Your acquirer and the card networks are already reading your TC40 and SAFE data, and under 2026’s tighter VAMP and EFM thresholds, that fraud reporting can end an account long before disputes would. Ask your acquirer or alert provider what your fraud reporting looks like now, while you can still act on it.

    Sources
  1. Verifi (a Visa company), “What is TC40 data?,” verifi.com.
  2. Merchant Risk Council, “Stricter VAMP Ratio Thresholds Are Now in Effect. Here’s How to Stay Compliant,” merchantriskcouncil.org, 2026.
  3. Chargeback Gurus, “FAQ: Fraud Monitoring with TC40 and SAFE,” chargebackgurus.com.
Share
Relevant Guides
The Payments Edge
Independent payments intelligence

Analysis for merchants, acquirers, and compliance teams working in medium and high-risk verticals. No PSP affiliations.

0 0 votes
Article Rating
Subscribe
Notify of
guest
0 Comments
Oldest
Newest Most Voted
Keep Reading

Related Insights

Never Miss an Insight

Get the Edge

Join merchants and payments professionals getting independent insight every month.

0
Don't just read — weigh in.x
()
x