Skip to content

Integrations and platforms

Chargeback and dispute testing

Chargeback and dispute testing checks that acquiring, POS, BNPL, spend management, and chargeback software moves card disputes through the network lifecycle, applies reason code and deadline rules, and builds evidence packages. Buyers receive a dispute lifecycle test suite per card network, deadline and reason code rule checks, an evidence package generation test report, and a simulated chargeback data set.

What chargeback and dispute testing covers

An acquirer platform that misses a response date leaves the merchant with the debit on a sale it could have defended, and an issuer platform that files outside the time limit processes an invalid Dispute, which section 11.1.2 of the Visa Rules forbids. We test dispute flows in acquiring and POS platforms, buy now pay later and spend management products, and the software described on the chargeback management segment page. Rules below cite the Visa Core Rules and Visa Product and Service Rules of 18 April 2026, checked on 2026-09-16.

Dispute lifecycle per card network

For Visa, the stage order depends on the dispute category:

  • categories 10 (Fraud) and 11 (Authorization), Table 11-1: Dispute, pre-Arbitration attempt by the acquirer, pre-Arbitration response by the issuer, Arbitration;
  • categories 12 (Processing Errors) and 13 (Consumer Disputes), Table 11-2: Dispute, Dispute Response by the acquirer, pre-Arbitration attempt by the issuer, pre-Arbitration response by the acquirer, Arbitration.

Checks after each transition:

  • Balances and fees. The dispute debit, the dispute fee, and the credit on a win post once each. Section 11.4.2 makes the party assigned or accepting final liability responsible for a currency conversion difference, and the ledger books it there.
  • Amounts. A partial Dispute amount carries through the response, and no Dispute amount exceeds the Transaction amount, except under condition 12.2 (section 11.4.1).
  • One response. Section 11.2.1 says an acquirer must not respond more than once to the original Dispute, so a retried submission job must not send a second one; API and webhook testing covers duplicate processor events.
  • Closure on silence. Under section 11.2.1, when a member does not respond through Visa Resolve Online within the specified timeframe, the cycle is closed and that member is responsible for the last amount the opposing member received. The product marks the case lost and posts the final debit.
  • Reversal. A member may reverse an action no later than 31 calendar days after its Processing Date, if the opposing member has not moved to the next stage and neither has accepted full or partial liability (section 11.3.3).

Other networks get stage models built from the rule edition you operate under.

Deadline and reason code rules

The checks map each processor reason string to a network condition, and each condition to its next permitted action and due date. Date tests cover:

  • the Processing Date of the preceding event, which section 11.2.1 does not count as one day;
  • a due date counted from the Dispute Processing Date, not from a later processor notification;
  • issuer-side filing for condition 13.1, where Table 11-92 requires a wait of 15 calendar days from the listed dates, or 30 calendar days after a provider cancels for travel agencies and third-party ticket sellers, unless the wait would pass the time limit or the merchant is insolvent or bankrupt, and a filing limit of 120 calendar days from the Transaction Processing Date, or from the last expected receipt date up to 540 calendar days after the Transaction Processing Date.

Because section 11.1.2 requires issuers to extend the protections of applicable laws and regulations, consumer account checks run the error resolution timers of Regulation E and the billing error timers of Regulation Z beside the network limits. For BNPL plans whose terms pause collection during a dispute, the checks confirm that instalments and late fees stop, then resume or are refunded on the outcome.

Evidence package generation

The Dispute Management Guidelines for Visa Merchants (June 2024, checked on 2026-09-16) list a separate response for each situation under condition 13.1, from proof of delivery to a credit with its amount and date, so each branch needs its own template. The report checks per template:

  • each required field comes from the order, shipping, or refund record, with dates in one time zone;
  • documents are in English or carry an English translation (section 11.3.1);
  • file type and size stay within your processor's documented limits;
  • attachments built from cardholder data show at most the BIN and last four digits of the card number, the display limit in PCI DSS v4.0.1 requirement 3.4.1 for staff without a business need to see more;
  • card-present packages from POS terminals carry the entry mode and chip data record, because the guidelines describe condition 10.1 disputes where the terminal could not read chips or full chip data did not reach Visa.

Simulated chargeback data set

Synthetic transactions and disputes cover each supported condition: full and partial amounts, a transaction currency different from the billing currency, due dates on calendar days 29, 30, and 31, month ends, and every final outcome. Spend management card programmes get issuer-side cases filed from the cardholder app before, at, and after the 13.1 waiting period. Processor sandboxes create disputes from test card numbers or amounts, and the chargeback simulation guide shows the requests.

Deliverables

  • Dispute lifecycle test suite per card network

    An automated suite that drives each dispute through every stage the card network defines, from the first Dispute to Arbitration, acceptance, and reversal, and checks case status, merchant balance, and fees after each stage, for engineering leads.

  • Deadline and reason code rule checks

    Boundary tests that compare the next action and due date your system computes for each processor reason string against the network rule edition in force, with the rule reference, test dates, and result per condition, for dispute operations and engineering leads.

  • Evidence package generation test report

    A report with one row per response template that lists the evidence fields the network condition calls for, the fields present in the generated package, card number masking, language, and file limits, and each defect found, for acquirers and merchants who review packages.

  • Simulated chargeback data set

    A synthetic set of transactions and disputes that covers each supported network condition, full and partial amounts, currency conversion, boundary dates, and every final outcome, loaded through your APIs and reused by the test suites.

How dispute tests fit your release process

Pull requests. The deadline and reason code rule checks run as table-driven tests in your CI. A new processor reason string without a mapping, or a due date that moves by one day, fails the build with the condition and the rule reference named.

Staging, nightly. The dispute lifecycle test suite runs against processor sandboxes and your staging ledger with the simulated chargeback data set. Deadline expiry and the 31-day reversal window are tested with a controllable clock in your services, so a nightly run covers a 120-day timeline.

Before each release. The evidence package generation test report is regenerated, and each generated package is compared field by field with the approved template for its response branch. A template change without an approved sample shows as an open row.

Rule edition changes. Visa publishes rules with future effective dates, and processors add reason strings. We add each change to the rule checks with its effective date, so tests run the old rule before that date and the new rule from it.

After release. A smoke run creates one sandbox dispute, uploads a generated package, and confirms that the status update reaches the case record and the merchant balance.

Test data. Tests use the synthetic data set only. PCI DSS requirement 6.5.5 keeps live card numbers out of pre-production environments unless those environments are in the cardholder data environment and protected under all applicable requirements. Production dispute exports used to reproduce a defect are masked first.

Evidence and handover. Suites, data loaders, and rule tables live in your repository and run without us. Data flow results for dispute attachments are input to your PCI DSS scope confirmation under requirement 12.5.2 and do not replace the assessment. Your team owns the reason code mapping, the decision to accept or contest each condition, and the release decision.

Sample deliverable

Sample, synthetic data

rule and threshold test matrixRule and threshold test matrix: transaction monitoring, disputes, collections, expense, market data, and claims rules
Rule and threshold test matrix: transaction monitoring, disputes, collections, expense, market data, and claims rules
Rule IDRule and referenceTest values below, at, and above the boundaryExpected outcomeActual outcomeResult
TM-STR-01Transaction monitoring structuring rule: open an alert when one customer makes two or more cash deposits on one business day, each below USD 10,000.00, that total more than USD 10,000.00. Built on 31 CFR 1010.313(b): multiple currency transactions shall be treated as a single transaction if the institution knows they are by or on behalf of any person and total more than $10,000 during any one business dayBelow: two cash deposits totalling USD 9,999.99; at: two cash deposits totalling USD 10,000.00; above: two cash deposits totalling USD 10,000.01The USD 9,999.99 and USD 10,000.00 totals open no structuring alert; the USD 10,000.01 total opens a structuring alert and a currency transaction report flagThe USD 9,999.99 and USD 10,000.00 totals opened no structuring alert; the USD 10,000.01 total opened a structuring alert and a currency transaction report flagPassed, 3 of 3 test values, run 2026-09-14
SAN-SCORE-01Sanctions name-match score threshold: open a screening alert and hold the payment when the name match score against a sanctions list entry is 85 or higher. Configured screening policy; no regulation sets the scoreBelow: match score 84; at: match score 85; above: match score 86, each for a synthetic customer name against a synthetic list entryMatch score 84 opens no alert; match scores 85 and 86 open a screening alert and hold the paymentMatch scores 84 and 85 opened no alert and released the payment; match score 86 opened a screening alert and held the paymentFailed: the comparator uses greater than 85 instead of 85 or higher; defect DEF-2210, critical severity, blocks release
CBK-DL-13.1Chargeback response deadline for Visa Dispute Condition 13.1 (Merchandise/Services Not Received): block submission of the response package after the network time limit. Visa Core Rules and Visa Product and Service Rules, 18 April 2026 edition, section 11.2.3, Table 11-2: the Dispute Response time limit is 30 calendar days from the Dispute Processing Date, with listed regional exceptions for some domestic transactionsBelow: calendar day 29 after the Dispute Processing Date; at: calendar day 30; above: calendar day 31, all dates counted in UTCCalendar days 29 and 30 accept the response package for submission; calendar day 31 blocks submission and marks the dispute case as expiredCalendar days 29 and 30 accepted the response package for submission; calendar day 31 blocked submission and marked the dispute case as expiredPassed, 3 of 3 test values, run 2026-09-14
COL-CALL-01Regulation F call frequency: block a further collection call to a person about a particular debt after seven calls within seven consecutive days. 12 CFR 1006.14(b)(2)(i)(A) and (b)(2)(ii): subject to the exclusions in (b)(3), a debt collector is presumed to comply if it places a telephone call to a particular person about a particular debt not more than seven times within seven consecutive days, and is presumed to violate the rule if it places calls in excess of that frequencyBelow: sixth call to one person about one debt within seven consecutive days; at: seventh call; above: eighth callThe sixth and seventh calls are placed; the eighth call is blocked by the dialer and rescheduled after the seven-consecutive-day periodThe sixth and seventh calls were placed; the eighth call was blocked by the dialer and rescheduled after the seven-consecutive-day periodPassed, 3 of 3 test values, run 2026-09-14
EXP-RCPT-01Expense policy receipt threshold: require a receipt before submission of a non-lodging expense of USD 75.00 or more. 26 CFR 1.274-5(c)(2)(iii)(A)(2): except as provided in (c)(2)(iii)(B), documentary evidence is required for any expenditure other than lodging of $75 or more, except that documentary evidence for transportation charges is not required if not readily availableBelow: meal expense of USD 74.99; at: meal expense of USD 75.00; above: meal expense of USD 75.01The USD 74.99 meal expense submits without a receipt; the USD 75.00 and USD 75.01 meal expenses are blocked until a receipt is attachedThe USD 74.99 and USD 75.00 meal expenses submitted without a receipt; the USD 75.01 meal expense was blocked until a receipt was attachedFailed: the rule uses greater than USD 75.00 instead of USD 75.00 or more; defect DEF-2213, medium severity, fix scheduled for the next release and does not block this release
MD-ENT-01Market data non-professional subscriber entitlement: grant the non-professional entitlement only to a natural person who is not registered or qualified in any capacity with the SEC, the CFTC, any state securities agency, or any securities exchange or association; not engaged as an investment adviser under Section 202(a)(11) of the Investment Advisers Act of 1940, whether or not registered; and not employed by an exempt bank or organization to perform functions that would require registration. Nasdaq Equity 7, Section 147(d)(4)(A), as quoted in SEC Release No. 34-94466 of 18 March 2022Below: natural person with no registration and no adviser role; at: natural person acting as an unregistered investment adviser; above: subscriber account opened in a company nameOnly the natural person with no registration and no adviser role receives the non-professional entitlement; the unregistered investment adviser and the company account receive the professional entitlementThe natural person with no registration and the unregistered investment adviser received the non-professional entitlement; the company account received the professional entitlementFailed: the status attestation checks registration only, so subscriber counts reported to the exchange are wrong; defect DEF-2211, high severity, blocks release
CLM-AUTO-01Claim auto-approval limit: approve a claim without adjuster review when the payable amount after the deductible is XTS 2,500.00 or less. Configured claims authority limit; no regulation sets the amountBelow: payable amount of XTS 2,499.99; at: payable amount of XTS 2,500.00; above: payable amount of XTS 2,500.01The XTS 2,499.99 and XTS 2,500.00 claims are approved automatically and queued for payment; the XTS 2,500.01 claim goes to adjuster review with no payment queuedThe XTS 2,499.99 and XTS 2,500.00 claims were approved automatically and queued for payment; the XTS 2,500.01 claim went to adjuster review with no payment queuedPassed, 3 of 3 test values, run 2026-09-14

Rule IDs, defect IDs, customers, claims, and run dates are synthetic, USD appears only where a regulation states the threshold in USD while configured limits use XTS (the ISO 4217 test code), and rule references were checked on 2026-09-16 against eCFR, the Visa Core Rules and Visa Product and Service Rules of 18 April 2026, and SEC Release No. 34-94466.

Questions

What are chargeback reason codes?

Chargeback reason codes are the codes a card network uses to classify why an issuer disputes a transaction, and each code sets its own conditions, evidence, and time limits. The Visa Rules of 18 April 2026 group Visa dispute conditions into categories 10 (Fraud), 11 (Authorization), 12 (Processing Errors), and 13 (Consumer Disputes), such as condition 13.1, Merchandise/Services Not Received.

How to respond to a chargeback?

Read the dispute condition and the response date that the acquirer or processor specifies. Accept the dispute when the condition has no remedy, such as goods that were never delivered. Otherwise send the acquirer documents that answer that condition, such as proof of delivery or a credit with its amount and date, legible and in English or with an English translation, as Visa's June 2024 merchant guidelines describe.

How long does a merchant have to respond to a chargeback?

A merchant has until the date its acquirer or processor specifies, which Visa says may vary by acquirer. Behind that date, the Visa Rules of 18 April 2026 give the acquirer 30 calendar days from the Dispute Processing Date for a Dispute Response or a pre-Arbitration attempt, with regional exceptions for some domestic transactions, and the Processing Date itself is not counted as one day.

Scope your chargeback and dispute testing

Send your processor integrations, reason code mapping, and evidence templates, and we return a test scope per network condition and response template.

Scope your testing