Mastercard Reason Code 4849: Questionable Merchant Activity

What Mastercard reason code 4849 means

4849 is a fraud code that’s still active in Mastercard’s rules, but it works differently from the others. A normal fraud chargeback starts with one cardholder saying “I didn’t make this purchase.” A 4849 starts with Mastercard flagging the merchant. Once Mastercard has identified a merchant through one of its audit or compliance programs, such as its global merchant audit program for excessive fraud or its questionable-merchant program for deceptive or prohibited practices, issuers can charge back qualifying fraudulent transactions processed during the identified period.

The program names, thresholds and details have changed over time and are set out in Mastercard’s rules and security documentation. Your acquirer will tell you if you’ve been identified, usually well before 4849s start arriving.

Why it’s hard to win

The issuer doesn’t have to prove that each order was fraudulent in the way a 4837 requires. It relies on Mastercard’s finding about the merchant, plus its own fraud report for the transaction. Arguing that a particular customer really did place the order often doesn’t address the basis of the chargeback.

What’s left are procedural defenses:

• The transaction date falls outside the period Mastercard identified.
• The merchant identified is not you, for example a different merchant ID or location under the same acquirer.
• The issuer didn’t report the transaction as fraud to Mastercard as required, or filed late.
• The transaction was already refunded before the chargeback.

Common causes

• A fraud spike, such as card testing or an account takeover wave, that pushes the merchant into a Mastercard fraud program
• Business practices Mastercard considers deceptive, such as hidden subscription terms or misleading offers
• Processing transactions for another business (transaction laundering)
• Ignoring acquirer warnings about rising fraud-to-sales ratios

Evidence that wins a 4849 dispute

1. Mastercard’s notice of identification (via your acquirer) showing the identified period and the merchant ID it covers.
2. Transaction date and merchant ID for the disputed sale, to show it falls outside that period or ID.
3. Fraud-reporting status from the issuer, which your acquirer can query.
4. Refund records if the transaction was already credited.
5. Order-level evidence (AVS, 3-D Secure, delivery) as support, though rarely decisive by itself.

How to prevent 4849 chargebacks

• Stop card testing early with velocity limits and bot protection. See card testing fraud.
• Watch your fraud and chargeback ratios monthly, not quarterly. See what a good chargeback ratio is.
• Use 3-D Secure on higher-risk orders to shift fraud liability to issuers.
• Make subscription and offer terms clear and easy to cancel.
• Act on acquirer warnings immediately; remediation is far cheaper than a program identification.

Should you fight or accept?

Fight only when a procedural defense applies: wrong period, wrong merchant ID, missing fraud report or a prior refund.

Accept the rest and concentrate on getting out of the program. Prolonged problems can escalate to acquirer termination and a listing on Mastercard’s MATCH list, covered in our MATCH list guide.