Banks are not orchestrating friendly fraud, but the chargeback system is built in a way that makes it easy to commit and unprofitable for issuers to stop. Whether banks are complicit in friendly fraud or simply following the path of least resistance is, in practical terms, the same question with the same answer: federal consumer protection rules, competitive pressure to keep cardholders happy, and the internal economics of dispute handling all point issuing banks toward approving disputes quickly rather than investigating them carefully. Merchants absorb the loss. Consumers learn that a phone call to the bank works faster than a return.
What Friendly Fraud Actually Is
Friendly fraud happens when the real cardholder disputes a charge they authorized. They bought the product, received it, and used it, then called the bank instead of the merchant. Some genuinely don’t recognize the billing descriptor on their statement. Some regret the purchase and find a chargeback less annoying than a return policy. A growing group treats the dispute process as a way to keep goods without paying.
Criminal card fraud is a different animal. There, a thief has the card data and the cardholder is the victim. The chargeback system was designed around that scenario. It handles the friendly version poorly because it was never meant to sort truthful cardholders from dishonest ones.
Why the Rules Tilt Toward the Cardholder
The bias isn’t a bank policy choice. It’s written into the federal regulations that govern card disputes.
Credit Cards: Regulation Z
Regulation Z caps a cardholder’s liability for unauthorized credit card use at $50, and most issuers waive even that.1eCFR. 12 CFR 1026.12 – Special Credit Card Provisions A cardholder has 60 days from the statement date to report a billing error. The issuer must acknowledge the dispute within 30 days and resolve it within two billing cycles, no later than 90 days.2eCFR. 12 CFR 1026.13 – Billing Error Resolution
The regulation requires a “reasonable investigation.” It doesn’t define one in a way that forces issuers to do much. If the bank concludes an error occurred, it must correct the account and refund related charges; if it concludes no error occurred, it must explain in writing.2eCFR. 12 CFR 1026.13 – Billing Error Resolution Nothing in the rule rewards a bank for probing harder, and nothing penalizes one for taking the cardholder’s word.
Debit Cards: Regulation E
Regulation E covers electronic fund transfers and uses a tiered liability structure keyed to how fast the consumer reports. Notify the bank within two business days of learning about the transfer, and liability caps at $50. Report later but within 60 days of the statement, and it caps at $500. Wait beyond 60 days after the statement, and the consumer faces unlimited liability for further unauthorized transfers.3Consumer Financial Protection Bureau. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Those tiers make sense for a stolen card. They apply exactly the same way when the person filing the dispute is the person who made the purchase. The rule doesn’t distinguish. That sorting job falls on the bank, and sorting costs money.
The Economics Inside the Bank
Every dispute lands in front of an issuer as a small cost-benefit problem. A real investigation means staff time, document review, and follow-up with a customer who is already irritated. Issuing a provisional credit and forwarding the chargeback to the acquirer takes minutes and leaves the customer satisfied. Across millions of accounts, speed beats scrutiny almost every time.
Competition sharpens the same incentive. Issuers advertise zero-liability protection and easy dispute resolution as features. A bank that gets a reputation for pushing back on disputes loses accounts. The cardholder is the bank’s paying customer. The merchant is a stranger on the other side of the network. When those interests collide, the merchant is the one without a seat at the table.
This is where the complicity argument finds its footing. Banks aren’t breaking the rules. The rules just make it cheaper to approve than to investigate. The short-term cost of a real inquiry almost always exceeds the short-term cost of passing the loss down the chain. That math is the whole story.
The Networks Punish Merchants, Not Issuers
Visa and Mastercard both run monitoring programs that penalize merchants whose chargeback ratios climb too high. Visa consolidated fraud and dispute monitoring into VAMP (the Visa Acquirer Monitoring Program) effective June 2025, flagging merchants as “Excessive” at a 2.2% ratio of fraud plus disputes to settled transactions with at least 1,500 combined counts per month.4Visa. Visa Acquirer Monitoring Program Fact Sheet 2025 Mastercard flags merchants who cross a 1% chargeback ratio in any month when disputes total $5,000 or more.5Stripe. High Risk Merchant Lists
The penalties escalate into per-dispute fees, review fees, and eventual termination of the merchant’s ability to process cards. A terminated merchant lands on the MATCH list, a shared database that effectively blocks new processing relationships for years.5Stripe. High Risk Merchant Lists Notice who is missing from that penalty structure: the issuing bank that approved the disputes in the first place. Networks discipline merchants for having too many chargebacks. They do not discipline issuers for waving too many through.
What This Costs the Merchant
A single chargeback hits a merchant three ways. The sale reverses. The product or service is already gone. And the acquiring bank charges a fee, usually $15 to $100, that is almost never refunded even if the merchant wins the case.
Industry estimates put friendly fraud somewhere between 40% and 80% of e-commerce fraud losses. For merchants selling digital goods with no shipment to point to, the losses run higher because “I never got it” is nearly impossible to disprove without detailed usage logs. Fighting a dispute also takes staff hours, and for smaller merchants the labor cost of contesting a $30 chargeback often exceeds the $30. So they eat it. That is exactly the calculation a friendly fraudster relies on, whether they’ve articulated it or not.
What a Consumer Filing a False Chargeback Is Actually Risking
If the system is this tilted, a reader might reasonably ask whether the consumer faces any consequence at all. There are consequences, and they are not small.
The routine one is account closure. Issuers can and do close accounts of customers whose dispute behavior looks suspicious, and some share that behavior data through industry channels that make opening new accounts harder. The serious one is criminal. Deliberately filing a false chargeback can satisfy the elements of federal wire fraud, which carries penalties of up to 20 years in prison, or up to 30 years and a fine of up to $1,000,000 when the fraud affects a financial institution.6Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television Federal prosecutors have brought chargeback fraud cases, including a guilty plea in the Eastern District of Virginia on conspiracy to commit mail fraud tied to a chargeback scheme.7U.S. Department of Justice. Florida Man Pleads Guilty to Credit Card Chargeback Conspiracy Prosecutions of individual consumers are rare next to organized schemes, but the framework is in place, and each false dispute adds a documented misrepresentation to a federally regulated institution’s records.
So, Are Banks Complicit?
Complicity and indifference produce the same outcome here, and that is the honest answer. Federal rules give issuing banks strong reasons to favor cardholders and few penalties for shallow investigation. Network rules discipline merchants for high chargeback rates but leave issuers largely unaccountable for approving weak claims. Newer tools like Visa’s Compelling Evidence 3.0 program let merchants push some liability back when they can prove the same customer used the account before, but those tools require data infrastructure that small merchants often don’t have.8Visa. Compelling Evidence 3.0 Merchant Readiness Until issuers face real cost for processing friendly fraud without investigating it, the incentives will keep producing the behavior the system was built to prevent.