Friendly Fraud: 2026's Biggest Chargeback Threat and How to Fight It

Your fastest-growing chargeback threat isn’t a hacker with a stolen card. It’s your own customer — the one who ordered, received, and enjoyed exactly what they paid for, then told their bank they didn’t recognize the charge. That’s friendly fraud, and in 2026 it’s the single biggest dispute problem most merchants face.

What friendly fraud is

Friendly fraud — also called first-party fraud or first-party misuse — is when a legitimate cardholder disputes a charge they actually made. The card wasn’t stolen. The order was placed by the real account holder. The goods or services were delivered. And the customer still filed a chargeback claiming fraud, non-delivery, or an unrecognized transaction.

It’s called “friendly” only because the person filing is your genuine customer, not an outside criminal. There’s nothing friendly about the outcome: you lose the sale, the product, the fee, and a hit to your ratio, all on a transaction that was completely valid.

Friendly fraud lives on a spectrum from innocent to deliberate:

• Honest confusion. The customer doesn’t recognize the billing descriptor, forgot about a subscription renewal, or a family member made the purchase. They genuinely believe the charge is wrong.
• Convenience disputing. The customer wants a refund but finds disputing with the bank easier than contacting you — often because your return process felt slow or unclear.
• Deliberate abuse (cyber-shoplifting). The customer knowingly disputes a valid charge to keep the goods for free. This is outright theft dressed up as a dispute.

The distinction matters for how you respond, but from the issuer’s point of view all three look the same at first: the real cardholder is saying the charge is bad. That’s exactly why friendly fraud is so hard to stop — and why the whole ecosystem struggles to catch it. For the full taxonomy, see first-party vs friendly vs true fraud.

Why it exploded

Friendly fraud isn’t new, but its scale is. It’s the fastest-growing chargeback type heading into 2026, and the numbers are stark. Industry data shows first-party fraud grew from roughly 15% of reported fraud in 2023 to about 36% in 2024, and surveys report around 83% of enterprise merchants seeing it rise. Friendly fraud now drives well over half of all chargebacks, while global chargeback volume keeps climbing into the hundreds of millions of disputes per year. Several forces converged:

Frictionless disputing. Banking apps turned the chargeback into a two-tap process. A customer can dispute a charge from their couch in ten seconds — faster than finding your support email. The path of least resistance now runs away from the merchant.

Card-not-present everywhere. E-commerce removed the signature and the in-person context that made disputes harder to file. When everything is remote, “I didn’t authorize this” is easy to claim and hard to instantly disprove.

Subscription and recurring billing. Recurring charges are the classic trigger. The customer signs up, forgets, sees a renewal months later, doesn’t recognize it, and disputes instead of canceling.

Awareness and normalization. Disputing has lost its stigma. Social media is full of advice on how to “get your money back,” and many customers don’t perceive disputing a delivered order as fraud at all.

Economic pressure. When budgets tighten, the temptation to reverse a legitimate charge and keep the item rises. Deliberate abuse climbs in hard times.

The result is a threat that grows faster than external fraud and is far harder to detect, because the person committing it is indistinguishable from a satisfied customer — right up until they dispute.

How to spot friendly fraud

You usually can’t identify friendly fraud at the moment of sale — the transaction is legitimate. You identify it when the dispute arrives, by reading the signals in the reason code and the order history.

The reason code is a fraud claim on a delivered order. The single clearest tell: a dispute coded as fraud (Visa 10.4, unauthorized) on a transaction you can prove was delivered to the cardholder’s verified address, with AVS and CVV matches. If it was truly fraud, the criminal wouldn’t ship to the cardholder’s own home.

The customer has a clean prior history with you. A cardholder who has bought from you before — same account, same device, same address — without disputing, then suddenly claims fraud, is a classic friendly-fraud profile.

Digital access after the “unauthorized” purchase. Login records, IP addresses, downloads, or usage logs showing the account was actively used after the disputed transaction contradict a fraud claim.

The dispute follows a refund request that went nowhere. If the customer contacted support, didn’t get a fast resolution, and then disputed, that’s convenience friendly fraud — and a signal to fix your service flow. See chargeback after a refund for the messy cases where both happen.

Repeat disputers. A customer with a pattern of disputes across merchants (or with you) is a strong abuse signal.

Watch for these signals per dispute and in aggregate. A cluster of fraud-coded disputes on delivered orders is a friendly-fraud problem, not a security breach.

How to fight it: compelling evidence and CE 3.0

Here’s the good news that gets lost in the panic: friendly fraud is winnable. Because the transaction really was authorized by the person disputing it, the truth is on your side — you just have to document it convincingly and submit it before the deadline.

The evidence that wins friendly-fraud disputes:

That last row is the foundation of Compelling Evidence 3.0 (CE 3.0), Visa’s framework for fighting fraud-coded (10.4) disputes. CE 3.0 lets you win by demonstrating that the disputing cardholder has a history of prior undisputed transactions with you, tied to the disputed one by matching data points — such as device fingerprint, IP address, delivery address, or account login ID. When you meet the criteria (typically two or more qualifying prior transactions sharing those linkages, within a defined lookback window), liability shifts back to the issuer. In plain terms: you prove “this is the same person who has bought from you before and never complained,” and the fraud claim collapses.

Assembling this evidence by hand, per dispute, before each deadline, is where most merchants lose — not because the case is weak, but because they run out of time or miss the reason-code-specific requirements. That’s the exact gap automation closes. DisputeDash detects the dispute the moment your processor reports it, pulls the reason-code-specific evidence — order data, delivery and tracking, AVS/CVV, IP, customer comms, and prior purchase history — builds the rebuttal, and submits before the deadline. Across 12,000+ disputes it’s held an average win rate near 87%, on a flat fee with no commission, so recovered revenue stays yours. For the manual playbook, see how to win a chargeback dispute.

How to prevent it

Winning disputes recovers revenue, but preventing them is cheaper. Most friendly fraud — especially the honest-confusion kind — is preventable at the source.

Fix your billing descriptor. The number-one cause of “I don’t recognize this charge” is a descriptor that doesn’t match your brand. Make it clearly show your recognizable business name, and add a support phone number or URL where the card network allows. This single fix eliminates a surprising share of disputes.

Make delivery undeniable. Always capture tracking and delivery confirmation. Signature confirmation on high-value orders gives you unbeatable evidence and deters the “never arrived” claim.

Kill subscription surprise. Send a renewal reminder before every recurring charge. Make cancellation obvious and one-click. Confirm every charge by email. A customer who’s reminded doesn’t dispute in confusion.

Make refunds easier than disputing. If reversing a charge with you is faster than calling the bank, convenience friendly fraud drops. Clear return policies, responsive support, and fast refunds redirect customers away from the dispute button.

Use AVS, CVV, and 3-D Secure. Strong authentication at checkout both reduces true fraud and strengthens your evidence if a friendly-fraud dispute comes later. On many 3-D Secure transactions, fraud liability shifts to the issuer entirely.

Keep clear, accurate listings. Set expectations so the product matches what arrives. “Not as described” disputes often trace back to optimistic marketing.

For the complete prevention system, see how to prevent chargebacks.

Fighting and preventing work together

Prevention and representment aren’t competing strategies — they’re a loop. Prevention shrinks the volume of disputes. Representment recovers the ones that slip through and, crucially, signals to abusers that disputing your charges doesn’t work for free. Merchants who only prevent leave winnable revenue on the table; merchants who only fight keep paying to win disputes they could have stopped. Do both.

The bottom line

Friendly fraud — a legitimate customer disputing a charge they actually made — is 2026’s biggest chargeback threat, now driving well over half of all disputes and growing faster than any other type. It’s hard to spot because the filer is your real customer, but it’s winnable because the transaction was real. Spot it by the fraud-claim-on-a-delivered-order pattern, fight it with compelling evidence and CE 3.0, and prevent it with clear descriptors, delivery proof, and easy refunds. The merchants who stay ahead treat friendly fraud as a system to manage, not a cost to accept.