How TC40 reporting works
Under the Visa Core Rules of 18 April 2026, an issuer must report fraud activity through VisaNet when it is detected. For an approved fraudulent transaction the limit is 60 calendar days from the transaction date, or 30 calendar days from the cardholder's notification where that arrives later.
The report is filed whether or not the issuer also disputes the payment. A fraud on a transaction that was authenticated, where the issuer has no chargeback right, still produces a TC40.
Where TC40 reports count
Visa's 2025 fact sheet on the Visa Acquirer Monitoring Program defines the VAMP ratio as the count of fraud (TC40) plus disputes (TC15), divided by the count of settled transactions (TC05), on card-not-present payments. The two counts are added, so a payment that is both reported as fraud and disputed appears in each.
The fact sheet leaves out TC40 fraud that qualified for Compelling Evidence 3.0, depending on the timing of the data.
What a merchant can do with TC40 data
Visa does not send the reports to merchants. Verifi, Visa's dispute company, says they reach a merchant only at the discretion of its acquirer or processor, and it offers a feed of them as fraud notices.
A TC40 is a confirmed fraud label that often arrives before the dispute. Merchants use it to block the card, cancel linked orders and subscriptions, refund first, and correct their fraud rules.
TC40, chargeback or SAFE?
- Chargeback
- The dispute that takes the money back, recorded at Visa as a TC15. A TC40 only records that fraud was reported.
- SAFE
- Mastercard's counterpart: issuers report fraud to its Fraud and Loss Database.
- Pre-dispute alert
- Asks the merchant for a refund before a dispute. A TC40 asks for nothing.
Where TC40 shows up in a platform
Modules that do the work
- Fraud & riskReal-time fraud scoring, limits and case management, with the risk engines you already trust.
- Card acquiringCard acceptance on the phone, in store and online, through the acquirer you choose.
- Analytics & monitoringProduct analytics, attribution, engagement and crash reports, on a tracking plan you control.
- Card issuingVirtual and physical cards, wallets and controls, on the issuer processor you choose.
Platforms that need it
Where it is written
The laws and standards this page's facts come from.
- Visa Core Rules and Visa Product and Service Rules, 18 April 2026: section 1.9.4.3
- Visa, Visa Acquirer Monitoring Program fact sheet, 2025
- Verifi, What is TC40 data?
General information, not legal advice: what applies to you depends on your services and your market.