Most merchants get their Mastercard number wrong before they ever compare it with a threshold — they divide by this month's transactions, or they count chargebacks they later won as removed, or they assume one Mastercard program covers everything. Mastercard's formula does none of those things, and Mastercard runs two programs, not one. This guide is deliberately narrow: it covers how the Mastercard ratio is computed, what the ECM and HECM lines are, what the separate EFM fraud program is, what happens when a line is crossed, how exit works, and what moves the number. For how Mastercard compares with Visa's VAMP program, read the companion merchant monitoring programs guide — this guide does not repeat that comparison.
The formula, with worked examples
The Mastercard chargeback-to-transaction ratio is first-presentment chargebacks received in the current month divided by Mastercard transactions processed in the previous month, multiplied by 100 for a percentage (or by 10,000 for basis points) — count-based, not dollar-weighted. Three details in that one sentence cause most of the confusion, so take them in order.
First, the numerator counts first-presentment chargebacks — chargebacks as first filed. A chargeback you later win through representment stays in the count: Mastercard does not recalculate thresholds or assessments for representment outcomes. Winning recovers the money; it never lowers the ratio.
Second, the denominator is last month's transactions. This is the trap in the formula: a slow sales month raises next month's official ratio on the same chargeback count, because the chargebacks of a normal month are divided by the transactions of a weak one. A merchant whose sales dip in December can cross the ECM line in January without a single extra dispute.
Third, the ratio alone never enrolls anyone. Both the ratio line and the monthly count gate must be met in the same month — a merchant with a 2% ratio but only 90 chargebacks is not in ECM, and a merchant with 400 chargebacks at 1.2% is not in ECM either.
Worked example 1 — ECM. A merchant receives 150 first-presentment chargebacks in July, against 7,500 Mastercard transactions in June. Ratio: 150 / 7,500 = 2.0%. The count (150) clears the 100 gate and the ratio (2.0%) clears the 1.5% line, so the ECM tier is crossed on these figures — but not HECM, which needs 300 chargebacks and 3.0%.
Worked example 2 — same ratio, no trip. The same 2.0% ratio on only 90 chargebacks (say 90 over 4,500 prior-month transactions) does not cross ECM, because the 100-chargeback gate is not met. The count gate is what keeps small merchants out of the program even when their ratio looks bad.
Worked example 3 — the denominator lag. A merchant receives 130 chargebacks in a month. Against 12,000 prior-month transactions that is 1.08% — under the line. Against 8,000 prior-month transactions after a slow month, the same 130 chargebacks are 1.63% — over the ECM line, with the count gate already met. Nothing about the disputes changed; the denominator did. Run your own figures in the Mastercard ECM / HECM Checker, which uses the last-month denominator by design.
The ECM and HECM tiers
ECM and HECM are two tiers of one program, the Excessive Chargeback Program (ECP), which monitors overall chargeback volume at the Merchant ID level across all transaction types, card-present and card-not-present alike. ECM is the entry tier; HECM is the escalated tier, with assessments running roughly double the ECM level.
Program tier
Ratio line
Count gate
ECM (Excessive Chargeback Merchant)
1.5% (150 basis points)
100+ chargebacks / month
HECM (High Excessive Chargeback Merchant)
3.0% (300 basis points)
300+ chargebacks / month
The tier logic is a simple ladder: if both HECM conditions are met, the merchant sits in HECM; otherwise, if both ECM conditions are met, the merchant sits in ECM; otherwise, in neither. A merchant with 350 chargebacks at 2.0% is in ECM, not HECM — the count alone does not escalate the tier. A merchant with 250 chargebacks at 3.5% is likewise in ECM, not HECM — the ratio alone does not escalate it either. Both conditions of the higher tier must hold together.
Designation is not instant on a single month: in the published pattern a merchant is designated after staying over the line, and the first month over threshold carries no assessment (see below). A single bad month may prompt acquirer monitoring without an official designation — which is exactly the window to fix the inflow before the program's machinery starts.
EFM: the separate fraud program
EFM — the Excessive Fraud Merchant program — is real, distinct from ECM, and easy to miss, because it watches only fraud. It counts only two reason codes on e-commerce (card-not-present) sales: 4837 (No Cardholder Authorization) and 4863 (Cardholder Does Not Recognize). A merchant with a clean overall ratio can still trip EFM if fraud chargebacks climb, and a merchant deep in ECM can be nowhere near EFM if its disputes are non-fraud. Track both numbers, because staying safe on one tells you nothing about the other.
EFM trips only when all four conditions hold in the same month. Miss any one and the program does not apply that month:
EFM condition
Threshold
Prior-month e-commerce transactions
1,000 or more
Fraud chargeback amount (codes 4837 and 4863)
USD 50,000 or more
Fraud chargeback ratio (fraud chargebacks / prior-month e-commerce transactions)
50 basis points (0.5%) or more
3DS utilisation
At or below 10% (US/Canada, non-regulated) or at or below 50% (Europe / regulated markets)
Worked example — EFM. A merchant has 100 fraud chargebacks in a month against 10,000 prior-month e-commerce transactions: 100 / 10,000 = 100 basis points, double the 50-basis-point gate. If its fraud amount is USD 50,000 or more, its e-commerce volume clears 1,000, and its 3DS utilisation is at or below the regional gate, EFM trips. If its 3DS utilisation is above the gate, EFM does not trip even with the fraud numbers met — that carve-out is the single most actionable fact in the whole program: raising 3DS / Identity Check use keeps a merchant out of EFM even when the fraud numbers would otherwise qualify.
When a MID trips both ECM and EFM in the same month, only the EFM assessment applies — the ECM assessment is suspended until EFM exit, and ECM assessments resume from wherever the ECM standing already sits once the EFM audit closes. EFM has only one tier, unlike ECM's two.
What happens at each tier
When a merchant crosses a tier, the published pattern is a remediation plan, heightened scrutiny of the Merchant ID, monthly review — and assessments that start in the second month in program and escalate with each consecutive month over threshold, plus a separate per-chargeback issuer recovery assessment on chargebacks over 300. Acquirers commonly add their own pressure on top: reserves, holds, volume caps, and in the worst cases termination and a MATCH listing, which can bar a merchant from new processing accounts for years.
This guide states no assessment amount, deliberately: published dollar schedules conflict across summaries — one source's own summary table disagrees with its full article table on the HECM month-2 and month-3 figures, and a per-chargeback figure quoted elsewhere disagrees with the 2019-guide figure — and the binding schedule is the one in your merchant agreement. Any page that quotes you a single Mastercard fine figure without that caveat is simplifying past the point of usefulness. Ask your acquirer for the schedule that applies to your account, and budget from that, not from a blog figure.
One timing fact is consistent across every source and worth planning around: the first month over the line is a warning with no assessment. That month is the cheapest month in the program's history — the month to cut the numerator before the schedule starts.
Merchants facing designation can also ask their acquirer to request a six-month extension, which holds fine collection while a chargeback-reduction plan is put in place — but fines keep accruing in the background, and if the merchant is still over threshold at expiry, the full accrued amount falls due at once. An extension is a pause on collection, not a pause on the program.
Exiting: three consecutive clean months
Exit from ECM, HECM or EFM takes three consecutive months below that program's thresholds. A single good month buys nothing, and one month back over threshold restarts the three-month clock from zero. If a MID is flagged again after an audit has closed, Mastercard treats it as first-time noncompliance and the assessment clock restarts at month 1.
Plan the exit in three-month blocks, not one-month sprints. A remediation plan that holds for a single month and then slips hands the merchant a restarted clock and another quarter inside the program — which is why the pointers below are all structural fixes, not one-off campaigns.
Remediation pointers that actually move the numerator
Work the numerator in the order merchants usually feel it, and measure each change by the chargeback count it removes, not by the revenue it recovers. First, fix the billing descriptor so customers recognise the charge — unrecognised charges are the cheapest disputes to prevent and the most common reason-code cluster in subscription and trial businesses.
Second, turn on pre-chargeback alerts so a refund replaces a chargeback before it posts — for Mastercard traffic that network is Ethoca, which Mastercard owns. A dispute resolved through a pre-dispute alert never enters the ECM or EFM ratio, because both programs only count chargebacks that actually post. Third, make cancellation painless and send renewal reminders, so customers who want out leave through your door instead of their bank's. Fourth, read reason codes monthly and fix the product, page or traffic source behind each cluster — a fraud cluster points at screening and authentication, a "not as described" cluster points at the listing, a subscription cluster points at the checkout and renewal flow.
For EFM specifically, raise 3DS / Identity Check use on card-not-present orders above the regional gate — 10% in the US and Canada, 50% in Europe and other regulated markets. Data-only 3DS transactions count toward that share too, so the gate can be cleared without challenging every customer. And get your acquirer's own Mastercard count in writing, every month, and reconcile it against yours: the gap between the two numbers — chargebacks you never saw, exclusions that did or did not land — is where surprises live, and it is cheaper to find in a monthly email than in a remediation plan. If you only want your own position checked, the Mastercard ECM / HECM Checker runs the formula, both tiers, the headroom math and the EFM four-condition check on one month's figures.
Run your own numbers
Your Mastercard ratio, your ECM/HECM tier, your headroom before the line, and the EFM fraud check — in under a minute.
ECM starts at 100 or more chargebacks in a month with a chargeback-to-transaction ratio of 1.5% or higher. HECM is the higher tier at 300 or more chargebacks with a ratio of 3.0% or higher. Both the count and the ratio must hold in the same month.
Mastercard divides first-presentment chargebacks received in the current month by Mastercard transactions processed in the previous month, then multiplies by 100. The denominator is last month's transactions, not this month's.
EFM is a separate, fraud-only program for e-commerce sales. It counts only fraud reason codes 4837 and 4863, and it trips only when all four conditions hold in the same month: at least 1,000 prior-month e-commerce transactions, at least USD 50,000 in fraud chargebacks, a fraud ratio of at least 50 basis points, and 3DS utilisation at or below 10% in the US and Canada or 50% in Europe and other regulated markets.
By staying below the program's thresholds for three consecutive months. One month back over threshold restarts the clock. Assessments apply from the second month in program; the first month over the line is a warning.
No. Mastercard counts first-presentment chargebacks and does not recalculate thresholds or assessments for representment outcomes. Winning recovers the money but leaves the ratio entry in place.
Sources (checked October 29, 2026): This site's merchant-monitoring-program-checker.html and chargeback-ratio-calculator.html (ECM 1.5% / 100, HECM 3.0% / 300, last-month denominator, EFM four conditions as stated there — no mismatch found); Chargeback.io — Mastercard Chargeback Monitoring Program: ECM vs. EFM (ECM/HECM table, prior-month denominator, EFM 1,000+ / USD 50,000+ / 50 bps / 3DS 10% and 50%, EFM-only billing when both trip, 3-clean-month exit, fines from month 2, citing Mastercard's ECP Guide Dec 2019 and EFM Program FAQ Feb 2022); Chargeflow — Mastercard Excessive Chargeback Program (ECP) Guide 2026 (ECM 100–299 / 1.5%–2.99%, HECM 300+ / 3%+, first-presentment basis, worked example 150 July / 7,500 June = 2%, EFM four criteria incl. reason codes 4837 and 4863, 3DS carve-out, 3-clean-month exit, six-month extension terms, citing Mastercard's Security Rules and Procedures and JPMorgan's ECM/EFM guides); Chargebacks911 — Mastercard chargebacks guide (ECM 1.5% / 100+, HECM 3.0% / 300+, prior-month denominator, first fine in month 2); Redo — Mastercard Excessive Chargeback Program (ECM 100+ / 1.50%, HECM 300+ / 3.00%, prior-month denominator, checked July 23, 2026 against JPMorgan/Braintree/Moneris reproductions); PaymentCloud — Mastercard chargebacks guide (prior-month denominator, 3-month-below exit rule, remediation plan requirement). Mastercard's rulebooks are not public; figures are as published in Mastercard's program guides as summarised by these guides, and can change. No dollar fine amounts are stated in this guide: published dollar schedules conflict across summaries, and the binding assessment schedule sits in your merchant agreement.
General information only — not financial or legal advice. Thresholds vary by acquirer and merchant agreement. This guide is a self-check aid, not a Mastercard determination. Verify your position with your acquirer.
Chargeback Clock