Skip to article
ecomservices.io
Chargebacks · How to run this
MatchingNot on this page yetPricingCalculatorIntakeCalculatorReason codesCalculatorRepresentmentCalculatorThresholdsCalculatorAllocationCalculatorOptimisationCalculatorPrevention stackCalculatorProviders

Library · Chargebacks · How to run this

Block the path after confirmed fraud

How to run thisChargebacks4 steps
GuideFraud stop-list checklist · Calculator lives in the articleOpen

A confirmed fraud chargeback is not a closed ticket. It is a path that still works until you block it. The same card, inbox, device, or ship-to will buy again if any door is open.

Pair: Fraud stop-list checklist on Chargebacks. Families: reason codes.

Five blocks, same day

PAN / token. Gateway and CRM. Killing the gateway PAN while the CRM token still bills is how continuity gets hit twice.

Email. CS and checkout. Not CS-only. They will place a new order.

Device / fingerprint. If you have it. Skip this row only when you truly have no device data. Then say so.

Ship-to address. Repeat fraud ship-to is a classic. Email-only blocks miss it.

All live MIDs. Not only the MID that took the hit. If checkout can rotate, they will. See MIDs.

BIN blocks need a human. Do not blanket-bin a big issuer because one ticket hurt. The checklist does not tick BIN on purpose.

If the offer is continuity, cancel the MIT. A blocked PAN with a live subscription is not blocked. See subscriptions.

Do not wait for a weekly meeting. The next order is often the same day.

When this fails

Blocking on one MID while checkout still uses another. Email-only blocks. Never touching the CRM token.

This is not a velocity rule. This is not 3DS placement. Those are other jobs. This list is the door you close after the CB you already lost.

Procedure

  1. After a confirmed fraud CB, tick PAN, email, device, address, all MIDs.
  2. Close the holes the same day.
  3. Cancel MIT if it is continuity.
  4. Do not wait for a weekly meeting.

Failure modes

  • Blocking on one MID while checkout still uses another.
  • Email-only blocks.
  • Never touching the CRM token.

Worked example

None on this page yet. When one lands it will be a real case: what broke, the number, and what changed. Not a composite.

Glossary

Stop list
Blocks after confirmed fraud so the same card, email, or ship-to cannot buy again on any MID.

Work with us — We run this job on your accounts. Services

FAQ

Is an email block enough?
No. They retry with a new inbox on the same card or the same ship-to. Block PAN or token, email, device if you have it, and the ship-to.
We blocked the MID that took the hit. Are we done?
No. Checkout may still use another live MID. Tick every MID that can take an order, including continuity.
Can this wait for the weekly fraud meeting?
No. Same day. If it is continuity, cancel the MIT token before the next rebill.