CHARGEBACKSGuide
Mastercard Reason Code 4837 Explained
Mastercard reason code 4837 means no cardholder authorization. Learn what triggers it and which evidence rebuts the chargeback.
5 min read
Fraud guides · fact-checked · plain English
Payment fraud & BIN intelligence, explained clearly.
Chargebacks, card testing, PCI compliance, and BIN lookups — written for merchants and developers, verified against official sources, and paired with free tools so you can put each guide into practice.
Latest guides
Browse by topic- PAYMENT SECURITYGuide
Why CVV Checks Don't Stop All Fraud
Understand the CVV fraud prevention limits: what the code proves, why it can't be stored, and why it fails after a full data breach.
5 min read - FRAUD DETECTIONGuide
How to Detect Card Testing on Your Site (Signals & Logs)
Learn how to detect card testing on your site using concrete log signals: decline spikes, attempts per IP and BIN, tiny amounts, and sequential numbers.
5 min read - FRAUD DETECTIONGuide
How to Fight and Win a Friendly Fraud Chargeback
Learn how to fight friendly fraud with compelling-evidence representment, recognizable descriptors, and delivery proof that beats first-party chargebacks.
5 min read - PAYMENT SECURITYGuide
3DS1 vs 3DS2: What Changed for Merchants
3DS1 vs 3DS2 explained for merchants: richer data, frictionless checkout, mobile support, and fewer redirects under EMVCo's modern authentication standard.
5 min read - BIN INTELLIGENCEGuide
8-Digit BINs Explained: Can Two Banks Share a BIN?
An 8 digit BIN identifies the card issuer more precisely than six digits. Learn why the standard expanded and how two banks can share one prefix.
8 min read
Browse by topic
70 guides across 5 topics — start with a cornerstone, then go deeper.
BIN & Card-Number Intelligence
How card numbers, BINs, and lookups actually work.
- BIN INTELLIGENCEPillar
How to Tell If a Card Is Prepaid, Debit, or Credit
The card's BIN reveals whether it's prepaid, debit, credit, or commercial. Learn how to tell card type from the first digits — and why it matters for fraud and fees.
8 min read - BIN INTELLIGENCEPillar
How BIN Lookup Works (and How Merchants Use It)
A BIN lookup turns a card's first digits into issuer intelligence. Learn how BIN lookup works, what data it returns, and how merchants use it to fight fraud.
9 min read - BIN INTELLIGENCEPillar
What Is a BIN Number? Bank Identification Numbers Explained
A BIN is the first 6–8 digits of a payment card. Learn what a Bank Identification Number reveals about the issuer, country, and card type — and what it never exposes.
9 min read
Show 11 more guides
- BIN INTELLIGENCEPillar
BIN vs IIN: How to Read and Decode Any Card Number
BIN and IIN mean the same thing — the digits that identify a card's issuer. Learn the difference in terminology and how to decode every part of a card number.
8 min read - BIN INTELLIGENCEGuide
8-Digit BINs Explained: Can Two Banks Share a BIN?
An 8 digit BIN identifies the card issuer more precisely than six digits. Learn why the standard expanded and how two banks can share one prefix.
8 min read - BIN INTELLIGENCEGuide
How to Block Prepaid or Gift Cards at Checkout
Learn how to block prepaid cards at checkout with BIN detection, when to decline versus step-up, and how to limit false positives that lose customers.
5 min read - BIN INTELLIGENCEGuide
Is a BIN the Same as the First 6 Digits of a Card?
Is a BIN the first 6 digits of a card? Historically yes, but modern BINs run 6 to 8 digits. Learn what changed, when it matters, and how to read them right.
8 min read - BIN INTELLIGENCEGuide
Why Prepaid Cards Carry Higher Chargeback Risk
Understand prepaid card chargeback risk: why anonymous, hard-to-trace prepaid and gift cards raise fraud exposure, and how a BIN prepaid flag helps.
5 min read - BIN INTELLIGENCEGuide
BIN Ranges: How Networks Allocate Card-Number Blocks
BIN ranges explained: how card networks allocate number blocks to issuers under ISO/IEC 7812, and how a lookup matches a card to its range.
8 min read - BIN INTELLIGENCEGuide
How to Add BIN Lookup to Your Stripe Checkout
Add BIN lookup to Stripe checkout to route, score, and tailor payments by issuer metadata, with a server-side pattern that never stores card numbers.
8 min read - BIN INTELLIGENCEGuide
Free vs Paid BIN Lookup: What Accuracy to Expect
Free vs paid BIN lookup accuracy: how freshness, coverage, and 8-digit support decide when free is enough and when a maintained API pays off.
8 min read - BIN INTELLIGENCEGuide
What Does the Last Digit of a Card Mean? (Luhn Check)
The Luhn algorithm check digit is the last digit of your card. See how the mod-10 check catches typos, worked examples, and why it never proves a card is real.
8 min read - BIN INTELLIGENCEGuide
BIN Lookup API vs Static BIN Database: Which to Use?
BIN database vs API: a static file is fast but goes stale; an API stays current for real-time checks. Compare freshness, coverage, latency, and upkeep.
8 min read - BIN INTELLIGENCEGuide
Card Network by First Digit: The MII Explained
The major industry identifier is the first digit of any card number. Learn what 3, 4, 5, and 6 reveal about the network behind a card.
8 min read
Fraud Types & Detection
The fraud patterns merchants face and how to spot them.
- FRAUD DETECTIONPillar
Friendly Fraud: A Merchant's Guide to First-Party Misuse
Friendly fraud is when a real cardholder disputes a charge they made. Learn why it costs merchants and how to prevent, diagnose, and fight it.
11 min read - FRAUD DETECTIONPillar
Card Testing & BIN Attacks: How to Detect and Stop Them
Learn how card testing fraud and BIN attacks work, the signals that expose them in your logs, and the layered controls that stop bots cold.
11 min read - FRAUD DETECTIONPillar
Account Takeover Fraud: Detection and Prevention Guide
A defensive guide to account takeover fraud: how ATO works, the detection signals that expose it, and the layered controls that stop intruders.
11 min read
Show 15 more guides
- FRAUD DETECTIONPillar
Synthetic Identity Fraud, Explained
Synthetic identity fraud blends real and fake data into fictitious people. Learn why victim-based detection fails and how lenders fight back.
11 min read - FRAUD DETECTIONPillar
Card-Not-Present Fraud: How It Works and How to Prevent It
A merchant's guide to card not present fraud prevention: how CNP fraud works and the layered controls that stop it without blocking real customers.
11 min read - FRAUD DETECTIONGuide
How to Detect Card Testing on Your Site (Signals & Logs)
Learn how to detect card testing on your site using concrete log signals: decline spikes, attempts per IP and BIN, tiny amounts, and sequential numbers.
5 min read - FRAUD DETECTIONGuide
How to Fight and Win a Friendly Fraud Chargeback
Learn how to fight friendly fraud with compelling-evidence representment, recognizable descriptors, and delivery proof that beats first-party chargebacks.
5 min read - FRAUD DETECTIONGuide
Card-Present vs Card-Not-Present Fraud: Key Differences
Card present vs not present fraud explained: how skimming and cloning differ from online CNP fraud, and why EMV chips pushed criminals to the web.
5 min read - FRAUD DETECTIONGuide
How Synthetic Identities Are Created and Used
Understand how synthetic identity works: how fabricated identities are assembled, matured, and why they slip past victim-based fraud detection.
5 min read - FRAUD DETECTIONGuide
Detecting Account Takeover from Login Behavior
Learn how to detect account takeover from login behavior: new device and IP signals, impossible travel, credential-change bursts, and anomaly scoring.
5 min read - FRAUD DETECTIONGuide
Credential Stuffing vs Account Takeover: The Difference
Credential stuffing vs ATO: one is the automated login attack, the other is the result. Learn how they connect, differ, and how to defend each.
5 min read - FRAUD DETECTIONGuide
Why Spikes in Small Declines Signal Card Testing
A sudden spike in small transaction card testing declines is a classic fraud tell. Learn why sub-$1 charges signal trouble and how to respond.
5 min read - FRAUD DETECTIONGuide
Stopping BIN Attacks with Rate Limiting & CAPTCHA
A practical bin attack prevention guide: layer rate limiting, CAPTCHA, 3-D Secure, BIN-range blocking, and monitoring to stop brute-force card testing.
5 min read - FRAUD DETECTIONGuide
Why Auto Lenders Are the Top Synthetic-Fraud Target
Why synthetic fraud in auto lending thrives, how fake identities slip through underwriting, and the controls that help lenders catch them early.
5 min read - FRAUD DETECTIONGuide
Subscription Chargebacks: Beating 'I Forgot I Subscribed'
Subscription chargebacks spike when customers forget they signed up. Learn how clear renewals, reminders, easy cancellation, and evidence cut disputes.
5 min read - FRAUD DETECTIONGuide
CNP Fraud Red Flags Every Store Should Watch
Learn the CNP fraud red flags every store should watch, from BIN-IP mismatches to velocity spikes, and how to score risk without blocking real buyers.
5 min read - FRAUD DETECTIONGuide
Friendly Fraud vs True Fraud: How to Tell Them Apart
Friendly fraud vs true fraud: use AVS, CVV, delivery proof, IP and device match, and order history to tell first-party misuse from real theft.
5 min read - FRAUD DETECTIONGuide
How Stolen Card Data Is Sold on the Dark Web
How stolen credit card dark web markets work: where breached data comes from, how cheaply it trades, and what it means for merchants defending checkout.
5 min read
Chargebacks & Disputes
Winning disputes and keeping your chargeback rate low.
- CHARGEBACKSPillar
Chargeback Reason Codes: Visa & Mastercard Reference
Read Visa and Mastercard chargeback reason codes correctly: families, deadlines, evidence, worked examples, and the mistakes that cost merchants disputes.
11 min read - CHARGEBACKSPillar
How to Reduce Your Chargeback Rate Before It's Too Late
Reduce chargebacks with a prevention program: clear descriptors, fast support, layered fraud screening, network-threshold monitoring, and refund-first habits.
11 min read - CHARGEBACKSPillar
How to Win a Chargeback Dispute (Step by Step)
Win a chargeback dispute step by step: match evidence to the reason code, beat the deadline, write a tight rebuttal, and know when arbitration pays off.
11 min read
Show 8 more guides
- CHARGEBACKSGuide
Mastercard Reason Code 4837 Explained
Mastercard reason code 4837 means no cardholder authorization. Learn what triggers it and which evidence rebuts the chargeback.
5 min read - CHARGEBACKSGuide
What Is Representment and How Does It Work?
Chargeback representment explained: what it is, how the process works, and how to assemble and submit compelling evidence that wins disputes.
5 min read - CHARGEBACKSGuide
The Chargeback Lifecycle: From Dispute to Arbitration
A clear walkthrough of the chargeback process steps, from cardholder dispute through representment, pre-arbitration, and final arbitration.
5 min read - CHARGEBACKSGuide
Matching Evidence to Each Chargeback Reason Code
A practical guide to chargeback evidence by reason code: which proof wins fraud, consumer-dispute, and processing-error disputes for Visa and Mastercard.
5 min read - CHARGEBACKSGuide
Visa VAMP & Chargeback Monitoring Thresholds Explained
Understand the Visa chargeback threshold, the VAMP program, and why staying under network monitoring limits protects your merchant account.
5 min read - CHARGEBACKSGuide
Visa Reason Code 10.4 (Fraud – Card-Not-Present) Explained
Visa reason code 10.4 explained: why card-not-present fraud chargebacks are issued and the compelling evidence that rebuts them.
5 min read - CHARGEBACKSGuide
Chargeback vs Refund: Which Costs More?
Chargeback vs refund: compare the real costs, dispute fees, lost goods, and ratio impact, and learn when a proactive refund beats fighting a dispute.
5 min read - CHARGEBACKSGuide
Clear Billing Descriptors: A Simple Way to Cut Disputes
Vague statement entries trigger billing descriptor chargebacks. See how a clear, recognizable descriptor cuts 'I don't recognize this charge' disputes.
5 min read
Payment Security & Compliance
3-D Secure, PCI DSS, AVS/CVV, and tokenization.
- PAYMENT SECURITYPillar
What Is 3D Secure (3DS2)? How It Cuts Fraud and Shifts Liability
What is 3D Secure? A plain-English guide to EMV 3DS2 step-up authentication, frictionless vs challenge flows, the liability shift, and common mistakes.
11 min read - PAYMENT SECURITYPillar
AVS & CVV Checks: How They Work and Where They Fail
What is AVS in payments? Learn how AVS and CVV checks verify cardholder data, how to read response codes, build a tiered policy, and the fraud they can't stop.
11 min read - PAYMENT SECURITYPillar
Tokenization vs Encryption in Payments
Tokenization vs encryption in payments: how each protects card data, where they differ, how tokenization shrinks PCI scope, and how to combine them.
11 min read
Show 10 more guides
- PAYMENT SECURITYPillar
PCI DSS for Small Merchants: A Plain-English Guide
Plain-English PCI DSS compliance for small business: what it is, why it applies, how to pick the right SAQ, and how to slash your scope.
11 min read - PAYMENT SECURITYGuide
Why CVV Checks Don't Stop All Fraud
Understand the CVV fraud prevention limits: what the code proves, why it can't be stored, and why it fails after a full data breach.
5 min read - PAYMENT SECURITYGuide
3DS1 vs 3DS2: What Changed for Merchants
3DS1 vs 3DS2 explained for merchants: richer data, frictionless checkout, mobile support, and fewer redirects under EMVCo's modern authentication standard.
5 min read - PAYMENT SECURITYGuide
Do You Need PCI Compliance If You Use Stripe?
Wondering about PCI compliance with Stripe? You still validate, usually SAQ A, but hosted fields and redirects shrink your scope dramatically. Here is how.
5 min read - PAYMENT SECURITYGuide
AVS Response Codes Explained (Full vs Partial Match)
AVS response codes explained: full match, ZIP-only, no match, and unavailable results, plus how to act on each to cut card-not-present fraud.
5 min read - PAYMENT SECURITYGuide
Does 3D Secure Shift Fraud Liability?
How the 3D Secure liability shift moves fraud-chargeback losses from merchant to issuer on authenticated transactions, plus the caveats that limit it.
5 min read - PAYMENT SECURITYGuide
How Tokenization Reduces PCI Scope
How tokenization shrinks PCI scope: replacing the PAN with a token keeps card data out of your systems, so fewer servers and processes face PCI DSS audit.
5 min read - PAYMENT SECURITYGuide
PCI DSS SAQ Types: Which One Applies to You?
A clear guide to the PCI DSS SAQ types (A, A-EP, B, C, D and more) and how to pick the questionnaire that matches the way you accept cards.
5 min read - PAYMENT SECURITYGuide
Network Tokens vs PSP Tokens: The Difference
Network tokens vs PSP tokens explained: who issues each, how scheme tokens auto-update, and the pros and cons for security and portability.
5 min read - PAYMENT SECURITYGuide
PCI DSS 4.0: What Changed and Why It Matters
A clear guide to the PCI DSS 4.0 changes: the customized approach, stronger authentication, and more frequent testing for handling payment card data.
5 min read
Fraud Operations & Tooling
Risk scoring, device fingerprinting, and velocity rules.
- FRAUD OPERATIONSPillar
Velocity Checks: Rules-Based Fraud Prevention That Works
Velocity checks count card, IP, email, and device events over time windows to catch card testing. Learn windows, thresholds, and BIN enrichment.
11 min read - FRAUD OPERATIONSPillar
Device Fingerprinting for Fraud Prevention
How device fingerprinting fraud detection works: the browser, OS, and canvas signals that link orders, catch account takeover, and respect privacy.
11 min read - FRAUD OPERATIONSPillar
How to Build a Transaction Risk Score
A developer's guide to transaction risk scoring: blend BIN, IP, velocity, and device signals into a weighted score, set thresholds, and pick rules or ML.
11 min read
Show 11 more guides
- FRAUD OPERATIONSPillar
IP Geolocation & VPN/Proxy Detection for Fraud Checks
Practical guide to IP geolocation fraud detection: compare BIN issuer country to IP country, classify VPNs and proxies, and respect the limits.
11 min read - FRAUD OPERATIONSGuide
Geolocation Spoofing: Limits of IP-Based Checks
IP geolocation spoofing via VPNs, CGNAT, and mobile carriers means location is one fraud signal among many. Learn its real limits and how to use it.
5 min read - FRAUD OPERATIONSGuide
BIN Country vs IP Country Mismatch: How to Use It
How a BIN IP country mismatch flags checkout risk, why travel and expats cause false positives, and how to score it without blocking good buyers.
5 min read - FRAUD OPERATIONSGuide
What Data Goes Into a Device Fingerprint?
A clear breakdown of the device fingerprint data points combined from browser, OS, screen, timezone, fonts, and canvas, and how stable each one is.
5 min read - FRAUD OPERATIONSGuide
10 Transaction Signals for a Fraud Risk Score
Learn the 10 transaction fraud risk score signals that separate good buyers from fraud, from BIN-vs-IP country to AVS, velocity, and device data.
5 min read - FRAUD OPERATIONSGuide
Combining Velocity Checks with BIN Intelligence
Pairing a velocity check with BIN data sharpens card-testing detection by grouping attempts on issuer, country, and prepaid signals.
5 min read - FRAUD OPERATIONSGuide
Canvas Fingerprinting & Browser Signals Explained
Canvas fingerprinting turns tiny rendering differences into a browser signal. Learn how it works, what it reveals, and the privacy trade-offs involved.
5 min read - FRAUD OPERATIONSGuide
How to Detect VPNs and Proxies at Checkout
Learn to detect VPN proxy checkout traffic: identify hosting, datacenter, and proxy IPs, treat them as risk signals, and avoid blocking good customers.
5 min read - FRAUD OPERATIONSGuide
Setting a Risk-Score Threshold Without Blocking Good Buyers
Learn how to set an approve, review, and decline fraud score threshold that stops chargebacks without rejecting legitimate, paying customers.
5 min read - FRAUD OPERATIONSGuide
How to Write Velocity Rules (Card, IP, Email, Device)
Learn to design velocity rules for fraud prevention: pick the right keys, windows, thresholds, and actions across card, IP, email, and device signals.
5 min read - FRAUD OPERATIONSGuide
Rules vs Machine Learning for Fraud Scoring
Rules vs ML fraud detection compared: when simple rules suffice, when machine learning helps, and how to combine both for explainable, accurate scoring.
5 min read