How Merchants Should Handle An Alleged Unauthorized Transaction
Unauthorized Transaction
Definition
A payment the cardholder claims was made without their permission.
Overview
Unauthorized Transaction A payment the cardholder claims was made without their permission. Merchants must respond to these claims quickly to comply with card-network rules, minimize losses and maintain good standing with acquirers.
When a merchant receives notice of a dispute or a chargeback alleging an unauthorized transaction, the clock starts. Card networks set strict timeframes for responding; acquirers expect comprehensive evidence. A structured response—combined with preventive controls—reduces the chance of losing representments and improves long-term fraud resilience.
Immediate Steps After Receiving A Dispute
- Review the chargeback reason: Identify the specific code and deadline supplied by your acquirer.
- Preserve evidence: Save payment tokens, full order logs, IP addresses, device fingerprints, AVS/CVV results and shipping records.
- Communicate internally: Alert finance, fraud and fulfillment teams to pause refunds or re-ships until the investigation completes.
Evidence That Strengthens Representment
Compile documentation that demonstrates authorization or valid fulfillment:
- Authentication records: 3-D Secure pass/fail messages, issuer authentication responses and customer challenge results.
- Payment metadata: Token IDs, transaction timestamps, authorization codes and AVS/CVV match status.
- Order fulfillment proof: Signed delivery receipts, tracking history with proof of delivery, photos of ID checks or notarized returns evidence.
- Customer communication: Order confirmations, email threads, chat logs, or explicit consent statements (e.g., recurring billing authorization).
When To Accept The Chargeback
Some disputes are better accepted—particularly when evidence is weak or the cost of fighting exceeds potential recovery. Evaluate the transaction amount, likelihood of winning, and broader implications (e.g., repeated disputes from the same customer that may indicate abuse).
Operational Controls To Reduce Future Claims
- Billing clarity: Use recognizable descriptors on statements so customers recognize charges.
- Delivery verification: Require signatures for high-value orders and use delivery services that provide photographic proof.
- Authentication tools: Implement 3-D Secure, device fingerprinting and velocity checks to block suspicious orders before fulfillment.
- Order review workflows: Flag orders with mismatched addresses, rapid velocity from a single IP or multiple cards from one device for manual review.
Coordination With Acquirers And Marketplaces
Keep acquirers informed about pattern issues—like spikes in unauthorized claims or new fraud vectors. Marketplaces should mediate between buyers and sellers, offer clear evidence submission portals, and maintain dispute-resolution SLAs to avoid prolonged provisional credits that harm buyer trust.
Practical Example For Merchants
A boutique receives a chargeback for a $220 order marked unauthorized. The merchant assembles the order page screenshot, the customer’s IP and device fingerprint showing a local mobile carrier, AVS and CVV match, the courier’s signature at delivery and the 3-D Secure authentication pass. The acquirer accepts the representment; the merchant retains the funds. The merchant updates its fraud rules to flag future orders from that IP reputation and requires additional verification on similar high-value purchases.
In short, the Unauthorized Transaction is a payment the cardholder claims was made without their permission. Merchants who document authorizations, improve authentication and reply promptly to disputes reduce revenue loss and protect their processing relationships.
Sources And Additional Reading (3)
- Report and Recover From Identity Theft
“Report and Recover From Identity Theft.” IdentityTheft.gov, https://www.identitytheft.gov/.
- Identity Theft
“Identity Theft.” Federal Trade Commission, https://consumer.ftc.gov/topics/identity-theft.
- PCI Security Standards Council
“PCI Security Standards Council.” PCI Security Standards Council, https://www.pcisecuritystandards.org/.
More from this term
Looking for a 3PL?
Compare warehouses on Racklify and find the right logistics partner for your business.