Back to Glossary

Excessive Chargeback Merchant (ECM)

The Excessive Chargeback Merchant (ECM) designation is the standard tier of Mastercard's Excessive Chargeback Program (ECP), applied to merchants whose monthly chargeback count and ratio exceed defined thresholds.

A merchant enters ECM status when two conditions are met simultaneously: 100 to 299 first-presentment chargebacks in a calendar month, and a chargeback-to-transaction ratio between 1.5% and 2.99% (150 to 299 basis points). Both the count and the ratio must be exceeded for two months (consecutive or non-consecutive) to trigger enrollment. ECM sits below the High Excessive Chargeback Merchant (HECM) tier and is part of the broader Acquirer Chargeback Monitoring Program (ACMP). Under the incoming Global Merchant Audit Program (GMAP), the ECM threshold will be phased down from 1.5% to 0.9% between 2027 and 2031.

Why ECM Matters

The Entry Point for Scheme Penalties

ECM is the first tier of Mastercard's chargeback enforcement. Merchants that cross this threshold enter a structured penalty program with monthly assessments starting at $1,000 in month two and escalating to $100,000 per month at month 19. From month four onward, an Issuer Recovery Assessment adds $5 for every chargeback above 300, creating variable cost on top of fixed fines. For mid-volume merchants, the cumulative financial exposure over a 12-month non-compliance period exceeds $200,000.

Dual-Condition Trigger

ECM requires both the chargeback count (100+) and the ratio (1.5%+) to be met. A high-volume merchant processing 50,000 transactions monthly could absorb 150 chargebacks at a ratio well below 1.5%, avoiding ECM. A low-volume merchant processing 5,000 transactions would hit 1.5% with just 75 chargebacks but would not meet the 100-chargeback count minimum. Understanding which condition a merchant is closer to breaching determines where monitoring effort should focus.

Tightening Thresholds Under GMAP

The ECM ratio threshold will decrease on a published schedule: 1.5% through 2028, 1.3% in 2029, 1.1% in 2030, and 0.9% from 2031 onward. Merchants operating between 0.9% and 1.5% today are compliant under current rules but will breach ECM thresholds as the floor drops. Acquirers need to identify these merchants now and begin remediation before the step-downs take effect.

How to Manage ECM Risk

1. Calculate the Ratio Correctly

Mastercard's ECM ratio is first-presentment chargebacks in the current month divided by total Mastercard transactions in the prior month, multiplied by 10,000 for basis points. The one-month offset between the numerator and denominator means a sudden drop in transaction volume can spike the ratio even without increased chargebacks. Monitor both the numerator and denominator trends independently.

2. Distinguish Chargeback Sources

Not all chargebacks indicate the same risk. Separate fraud-related chargebacks (reason code 4837) from service disputes, authorization issues, and processing errors. Each category requires a different remediation approach. A merchant with 120 chargebacks, 80 of which stem from unclear billing descriptors, needs a descriptor update, not a fraud prevention overhaul.

3. Intervene Before the Second Month

ECM enrollment triggers after two months of threshold exceedance. A merchant that breaches in one month but drops below in the next avoids enrollment entirely. Use the first month as an intervention window: contact the merchant, identify root causes, and implement corrections before the second qualifying month occurs.

4. Account for the GMAP Step-Down Schedule

Model your current portfolio against the 2029 threshold (1.3%), not just the current 1.5%. Merchants operating between 1.3% and 1.5% are safe today but will become non-compliant within three years. Proactive remediation for this cohort avoids a wave of ECM enrollments when the threshold drops.

5. Track the Three-Month Exit Requirement

Merchants exit ECM only after three consecutive months below both the count and ratio thresholds. A merchant that drops below for two months but spikes in the third resets the exit clock. Build remediation plans that target sustained reduction, not temporary compliance.

ECM in Practice: A Real-World Scenario

A subscription services merchant processing 8,000 Mastercard transactions monthly receives 140 chargebacks in January (1.75% ratio) and 155 in February (1.94% ratio). Both months exceed the 100-count and 1.5%-ratio thresholds, triggering ECM enrollment.

The acquirer's analysis reveals that 65% of chargebacks come from customers who attempted to cancel but could not reach support or find the cancellation flow. The merchant implements a self-service cancellation portal and adds confirmation emails with billing descriptor details. Chargebacks drop to 70 in April, 55 in May, and 48 in June. The merchant exits ECM after three consecutive compliant months, having paid $2,000 in assessments during months two and three.

Strategic Impact on Payment Providers

Early Warning for Portfolio Risk

ECM-flagged merchants signal broader portfolio health issues. A cluster of ECM enrollments in a specific vertical or merchant type indicates systemic risk factors in the acquirer's onboarding criteria or underwriting standards. Tracking ECM patterns across the portfolio provides actionable intelligence for tightening acceptance policies.

Financial Planning for Assessment Exposure

ECM assessments are predictable: the monthly schedule is fixed and published. Acquirers can model total financial exposure across their portfolio by tracking how many merchants are in ECM, their current month in the program, and the probability of exit within specific timeframes. This enables accurate financial forecasting for scheme-related costs.

Continuous Merchant Monitoring as a Requirement

Monthly chargeback ratio calculation requires continuous access to both chargeback data and prior-month transaction volumes at the merchant ID level. Acquirers relying on quarterly reviews or manual aggregation will miss the two-month enrollment trigger and enter the penalty program before remediation begins. Automated monitoring with real-time alerting is the operational baseline for ECM management.

How Ballerine Supports ECM Management

Ballerine's merchant monitoring platform calculates chargeback ratios at the merchant ID level continuously, flagging accounts approaching ECM thresholds with configurable alert buffers. The system tracks both count and ratio conditions, distinguishes fraud chargebacks from non-fraud disputes, and supports structured remediation workflows with audit-ready documentation. As one of five solutions globally certified under Mastercard's MMSP, Ballerine helps acquirers reduce scheme fines by up to 75% while maintaining compliance across the portfolio.

Trusted by

Trusted by Leaders in the Payments Ecosystem

70%

Reduced manual efforts

49%

Improved review resolution time

30%

Increase in 
detected fraud

“We were able to downsize our compliance staff’s workload significantly, which allowed us to allocate the savings and workforce into more improvement projects.”

Shmulik Davar

VP Product at Fido

67%

Reduced Hiring Time

“Proactively navigating fintech regulations requires faster technology adoption. Next-gen compliance infrastructures should seamlessly integrate with existing and new systems and data sources.”

Ran Nachman

VP Regulation Solutions 
at eToro

67%

Reduced Hiring Time

“Proactively navigating fintech regulations requires faster technology adoption. Next-gen compliance infrastructures should seamlessly integrate with existing and new systems and data sources.”

Vicente Mederos

Head of Risk 

at Access Group

98%

Local Compliance

“User-friendly, reliable, and fast. It’s exactly what we needed to scale without adding complexity.”

Emily Rivera

Co-Founder

4.8 rating from 1.5k reviews

Author ImageAuthor ImageAuthor ImageAuthor Image

10+

Download from app store

Download for iOS

Ready to transform how your bank onboards, underwrites, and manages merchant risk?