Reviewed by Mayer Hyman, Payments Specialist | Reviewed for accuracy July 2026
Key Takeaways
- The MATCH list (Mastercard Alert to Control High-Risk Merchants) is a shared database of terminated merchants that acquiring banks are required to check before opening a new merchant account.
- Mastercard’s MATCH Pro rules require acquirers to file a listing within 5 days of terminating a merchant for one of 13 reason codes, and the record stays active for 5 years regardless of which card network the merchant primarily uses.
- Excessive chargebacks is one of the most common reasons for listing: any month where chargebacks exceed 1% of Mastercard sales transactions and total $5,000 or more can trigger it.
- Only the acquirer that filed the listing can request its removal, and Mastercard only permits removal for filing errors or resolved PCI DSS noncompliance — not simply because a merchant has “cleaned up its act.”
- There’s no public lookup tool for merchants; most business owners discover they’re listed only when a new acquirer’s underwriting team rejects their application.
What Is the MATCH List?
MATCH — Mastercard Alert to Control High-Risk Merchants — is a database maintained by Mastercard that records merchants whose card-processing accounts have been terminated by an acquiring bank for specific, defined reasons. It’s the direct successor to what the industry used to call the Terminated Merchant File (TMF), and Mastercard now operates it as MATCH Pro, an API-based reporting system.
To be precise about the players involved: Mastercard and Visa are card networks. Acquiring banks (and the payment processors that work with them) are the institutions that actually hold a merchant’s account and settle its transactions. MATCH exists so that acquirers can warn each other about merchants who caused serious problems for a previous acquirer — before they sign up to inherit the same risk.
Under Mastercard’s MATCH Pro rules, an acquirer must submit a listing within 5 days of deciding to terminate a merchant for a qualifying reason. Every Mastercard acquirer is required to check MATCH during underwriting for new merchant applications, which is why a listing follows a business (and often its owners personally) well beyond a single processor relationship.
Related: How to Make Returns and Chargebacks Work for Your Brand
What Happens If You’re on the MATCH List?
Being listed doesn’t legally bar a business from accepting cards, but in practice it makes getting a new merchant account extremely difficult. Because every Mastercard acquirer must screen against MATCH, a listed merchant will be declined by most mainstream processors during underwriting.
A smaller group of high-risk specialty processors will still consider MATCH-listed merchants, but typically at a steep price: higher discount rates, rolling reserves, longer contract terms, and early-termination penalties. Approval through these channels, when it happens, commonly takes several weeks rather than the same-day or next-day approval a clean business would get.
Some businesses try to route around card processing altogether — cash only, ACH/eCheck, peer-to-peer apps, or cryptocurrency. None of these substitute well for a card-accepting ecommerce checkout, and they typically mean lost sales rather than a real fix.
For more on chargeback management, read Digital Chargeback Management — A Better Strategy for eCommerce Growth.
Why Merchants End Up on the MATCH List
Mastercard’s Security Rules and Procedures manual, Section 11.5, defines the specific reason codes an acquirer must cite when filing a MATCH record. The current list, per Mastercard’s published rules, includes:
- Account Data Compromise — a breach that exposed cardholder account data.
- Common Point of Purchase (CPP) — the merchant’s location is identified as the common point of a fraud pattern.
- Laundering — evidence the merchant processed transactions to launder funds.
- Excessive Chargebacks — chargebacks in any calendar month exceed 1% of Mastercard sales transactions and total $5,000 or more.
- Excessive Fraud — a fraud-to-sales ratio of 8% or more in a calendar month, or 10+ fraudulent transactions totaling $5,000 or more.
- Fraud Conviction — the merchant or a principal has been convicted of fraud related to a payments transaction.
- Mastercard Questionable Merchant Audit Program — the merchant is flagged as “questionable” under Mastercard’s own audit program.
- Bankruptcy, Liquidation, or Insolvency — while still owing the acquirer money.
- Violation of Standards — a serious breach of Mastercard’s merchant rules.
- Merchant Collusion — the merchant colluded in fraud committed against Mastercard or a cardholder.
- PCI DSS Noncompliance — the merchant failed to comply with PCI Data Security Standard requirements, typically following a breach.
- Illegal Transactions — processing transactions for a prohibited or unlawful business.
- Identity Theft — the merchant application involved identity theft.
Excessive chargebacks and excessive fraud are worth flagging separately from Mastercard’s broader chargeback and fraud monitoring programs (the Excessive Chargeback Program and, on the Visa side, the Visa Acquirer Monitoring Program that replaced VDMP/VFMP in April 2025). Those monitoring programs impose fines and remediation timelines at lower thresholds — Visa’s framework flags acquirer portfolios at a 0.5% dispute ratio and treats 0.7% as “excessive” — well before a merchant would hit MATCH’s 1%-and-$5,000 bar for an actual listing. In other words, a merchant can face real financial pressure from chargeback monitoring long before MATCH becomes a risk, which is exactly why chargeback ratio matters even for merchants who feel confident they’ll never get near termination.
The stakes behind this are larger than one merchant’s bad month: chargeback volume industry-wide is projected to reach 261 million transactions in 2025, and merchants are expected to absorb over $100 billion in related costs (Chargeflow, 2025). Every dollar lost to a chargeback now costs a merchant an estimated $3.75–$4.61 once fees, lost goods, and operational overhead are counted (Chargeflow/LexisNexis, 2025) — a cost curve that makes it easy to cross MATCH’s excessive-chargeback threshold without realizing it until an acquirer’s monitoring team flags the account.
How Long Does a MATCH Listing Last?
A MATCH record stays active for 5 years from the date it’s filed, after which Mastercard’s system purges it automatically. There is no early “good behavior” release for most reason codes — the clock simply runs from the filing date, regardless of whether the underlying issue is long resolved.
How to Check If You’re on the MATCH List
There is no self-service portal where a business owner can look up their own MATCH status. MATCH Pro is an acquirer-facing underwriting tool, not a public registry. In practice, most merchants find out they’re listed only when a new acquirer or processor rejects their application during underwriting and cites a MATCH hit as the reason.
If you suspect you may be listed — for example, after a sudden account termination — you can ask your former acquirer directly whether they filed a MATCH record and under which reason code. You’re generally entitled to that information since it was filed using your business’s data.
How to Get Removed From the MATCH List
Removal is far more restrictive than most merchants expect. Only the acquirer that filed the original listing can request its removal from Mastercard — a new processor, a lawyer, or the merchant itself cannot go directly to Mastercard and demand a correction. There are essentially three paths off the list:
1. The Five-Year Expiration
If the listing has been active for 5 years, it’s purged automatically. This is the most common way merchants come off MATCH, and it requires no action.
2. Filing Error
If the acquirer made a mistake — wrong business entity, incorrect reason code, or a listing that didn’t actually meet the threshold for that reason code — the merchant can contact the acquirer (or engage an attorney who specializes in this) to request a correction. The acquirer, not Mastercard, has to initiate the fix.
3. Resolved PCI DSS Noncompliance
If the listing reason was PCI noncompliance, Mastercard allows removal once the merchant can show current compliance — typically a compliance certificate or validation letter from a Mastercard-approved assessor, submitted through the original acquirer.
Outside of these three scenarios, a merchant is on the list for the full five years. Chargeback ratio, fraud ratio, and most of the other reason codes don’t have a documented “clean it up and get delisted early” exception.
How to Avoid the MATCH List in the First Place
Since removal options are narrow, prevention is the far more reliable strategy. A few practices consistently keep merchants below the thresholds that trigger a listing:
Use Chargeback Alerts
Both networks offer early-warning tools — Verifi by Visa and Ethoca by Mastercard — that notify a merchant when a cardholder initiates a dispute, giving the merchant a window to refund or resolve the issue before it becomes a formal chargeback. Since MATCH’s excessive-chargeback code is based on a raw monthly ratio, intercepting disputes before they post is one of the most direct ways to stay under the 1% threshold.
Tighten Fraud Controls
Because MATCH’s excessive-fraud code triggers at an 8% fraud-to-sales ratio, fraud prevention isn’t just a loss-control issue — it’s a MATCH-avoidance issue. Two-factor authentication, device fingerprinting, velocity checks, and address/CVV verification all reduce the odds of a fraud spike large enough to trip the threshold.
Follow Card Network Protocols
Capturing AVS and CVV matches, retaining proof of delivery, and following each network’s documentation requirements strengthens a merchant’s position in chargeback disputes — and a merchant who loses fewer disputes accumulates fewer counted chargebacks in the first place.
Stay PCI Compliant
Since PCI noncompliance is its own standalone MATCH reason code, maintaining current PCI DSS validation isn’t optional paperwork — it’s a direct listing risk, especially after any kind of data incident.
Use a Clear Merchant Descriptor
Unrecognized billing descriptors are a well-documented driver of “friendly fraud” chargebacks — disputes that aren’t fraud at all, just a cardholder who didn’t recognize a legitimate charge. A descriptor with a clear business name and support number cuts down on this category before it can add to a merchant’s chargeback count.
Manage Subscriptions Carefully
Recurring billing is a disproportionate source of disputes, largely because cardholders forget they signed up. Sending renewal reminders and making cancellation easy reduces this specific chargeback source substantially.
These practices matter more than they might seem: friendly fraud alone now accounts for roughly 75% of ecommerce disputes (Chargeflow, 2025), meaning most of the disputes pushing a merchant toward MATCH’s excessive-chargeback threshold are preventable through better descriptors, communication, and dispute intervention rather than fraud-fighting alone.
Choosing a Payments Partner That Helps You Stay Off the List
The MATCH list itself isn’t the real problem for most merchants — unmanaged chargebacks and fraud are. Staying under Mastercard’s thresholds comes down to disciplined dispute response, fraud tooling, and clear communication with customers well before a termination is ever on the table. Cartis Payments works with ecommerce merchants to build chargeback and fraud management into their existing payment stack, so a bad month doesn’t turn into a five-year problem.
Frequently Asked Questions
What does MATCH stand for?
MATCH stands for Mastercard Alert to Control High-Risk Merchants. It’s Mastercard’s database of merchants whose accounts were terminated by an acquiring bank for one of 13 defined reason codes, ranging from excessive chargebacks to fraud convictions.
How long does a business stay on the MATCH list?
Five years from the date the listing was filed. Mastercard’s system purges records automatically after that period; there’s no standard early-removal path outside of a filing error or resolved PCI noncompliance.
Can I check if my business is on the MATCH list?
Not directly. There’s no public lookup tool. Most merchants learn they’re listed when a new acquirer’s underwriting process rejects their application. You can ask your former acquirer whether they filed a MATCH record on your business and which reason code they used.
Can I still get a merchant account if I’m on the MATCH list?
Sometimes, through specialized high-risk processors, but expect higher fees, rolling reserves, longer contracts, and a slower approval process — often several weeks rather than days.
What’s the difference between the MATCH list and a chargeback monitoring program?
Chargeback monitoring programs (like Visa’s Acquirer Monitoring Program or Mastercard’s Excessive Chargeback Program) flag and fine merchants at lower dispute-ratio thresholds as an early warning. MATCH is what happens after an account is actually terminated for a qualifying reason — it’s a later, more severe consequence, not the same thing as a monitoring warning.
