The Visa Merchant Screening Service, and how it differs from MATCH

The Visa Merchant Screening Service is Visa’s equivalent of Mastercard’s MATCH list: a database of terminated merchants that acquirers check before boarding. It runs on its own codes and its own thresholds, and an acquirer may screen an applicant against both systems.

What the Visa Merchant Screening Service does

The same job MATCH does, for a different card brand. When an acquirer terminates a merchant for a qualifying reason, the merchant can be recorded in VMSS, and other acquirers see that record when they screen an application. As with MATCH, the acquirer that placed the entry is the only party able to remove it, and Visa’s rules allow removal only where the business was added in error.

The consequence people miss is that these are two separate systems. A business can be recorded on one, the other, or both. Confirming that no MATCH listing exists tells you nothing at all about VMSS, and vice versa.

The published VMSS thresholds

Two codes carry numeric triggers, and they are worth knowing because they sit at very different levels to Mastercard’s.

Code 21, excessive fraud: 250,000 US dollars in fraud combined with a 1.8% fraud-to-sales ratio.

Code 22, excessive disputes: 1,000 disputes combined with a 1.8% dispute-to-sales amount ratio in a single month.

Both are measured on Visa activity, in the same way Mastercard’s code 4 counts only Mastercard-card chargebacks against Mastercard-card sales.

Why the two brands’ numbers are so far apart

Mastercard’s code 4 triggers at chargebacks exceeding 1% of Mastercard sales transactions in a calendar month, with those chargebacks totalling 5,000 US dollars or more. Visa’s code 22 needs 1,000 disputes and a 1.8% ratio.

The gap is enormous, and the direction of it matters. A small or mid-sized business will hit Mastercard’s threshold long before it comes anywhere near 1,000 disputes in one month, so Mastercard’s numbers are the binding constraint for most merchants. Visa’s dispute threshold is a large-merchant number. Visa’s fraud threshold at 250,000 dollars is similarly a big-volume figure.

The practical rule is to manage against the tighter of the two, which for almost every independent business is Mastercard’s. The code 4 arithmetic is in the excessive chargebacks threshold and code 5 is in the excessive fraud threshold.

What a blended chargeback ratio hides

Most monthly statements show one blended figure across all card brands. Neither screening system uses a blended figure. Both look at their own brand’s activity in isolation.

That means a business can look comfortable on a statement while sitting over the line on one brand. It happens most often where a product or a customer segment skews toward one issuer, or where a single fraud episode ran on cards from one network. Track the per-brand ratio, monthly, on the calendar rather than on your statement cycle. It is a small piece of bookkeeping that prevents the most avoidable version of this problem. Practical detail is in how to lower your chargeback ratio.

What VMSS means for an application

Broadly what a MATCH listing means: a narrower field of acquirers and a closer read. The response is also the same. Assemble the file, disclose what happened, show what changed, and go to acquirers who underwrite rather than aggregators who screen automatically. That distinction is set out in payment aggregators versus dedicated merchant accounts.

One difference is worth flagging. Visa’s removal rule is narrower than Mastercard’s, because Mastercard also allows removal of a code 12 PCI listing once compliance is confirmed, and Visa’s published route is added-in-error only. So on the Visa side there is even less point pursuing removal unless the entry is factually wrong. Where to go instead is in getting a merchant account after a MATCH listing, and the combined reference for both systems is on our MATCH list reference page.

Frequently asked questions

Can I check VMSS myself? No, in the same way MATCH has no merchant lookup. Ask the terminating acquirer whether an entry was placed and under which code.

Does one termination put me on both lists? It can, if the acquirer records the merchant in both systems. It is not automatic, and it is worth asking about each specifically rather than assuming.

Does VMSS expire after five years like MATCH? The five-year automatic purge is Mastercard’s published rule for MATCH. Visa operates its own system on its own terms, so do not assume the Mastercard timeline applies.

Do Amex and Discover run equivalents? They operate their own risk and screening processes. MATCH and VMSS are the two systems acquirers most commonly reference when they talk about a merchant being listed.

Sources: Mastercard Security Rules and Procedures Merchant Edition (SPME manual), and Stripe’s published documentation at docs.stripe.com/disputes/match, which reproduces both the Mastercard and Visa thresholds.