MATCH and VMSS reason codes explained

An occurrence that results, directly or indirectly, in the unauthorized access to or disclosure of Account data.

Account data is stolen at the Merchant and then used for fraudulent purchases at other Merchant locations.

The Merchant was engaged in laundering activity. Laundering means that a Merchant presented to its Acquirer Transaction records that were not valid Transactions for sales of goods or services between that Merchant and a bona fide Cardholder.

With respect to a Merchant reported by a Mastercard Acquirer, the number of Mastercard chargebacks in any single month exceeded 1% of the number of Mastercard sales Transactions in that month, and those chargebacks totaled USD 5,000 or more.

The Merchant effected fraudulent Transactions of any type (counterfeit or otherwise) meeting or exceeding the following minimum reporting Standard: the Merchant's fraud-to-sales dollar volume ratio was 8% or greater in a calendar month, and the Merchant effected 10 or more fraudulent Transactions totaling USD 5,000 or more in that calendar month.

There was a criminal fraud conviction of a principal owner or partner of the Merchant.

The Merchant was determined to be a Questionable Merchant as per the criteria set forth in the Mastercard Questionable Merchant Audit Program.

The Merchant was unable or is likely to become unable to discharge its financial obligations.

With respect to a Merchant reported by a Mastercard Acquirer, the Merchant was in violation of one or more Standards that describe procedures to be employed by the Merchant in Transactions in which Cards are used, including, by way of example and not limitation, the Standards for honoring all Cards, displaying the Marks, charges to Cardholders, minimum/maximum Transaction amount restrictions, and prohibited Transactions set forth in Chapter 5 of the Mastercard Rules manual.

The Merchant participated in fraudulent collusive activity.

The Merchant failed to comply with Payment Card Industry (PCI) Data Security Standard (DSS) requirements.

The Merchant was engaged in illegal Transactions.

The Acquirer has reason to believe that the identity of the listed Merchant or its principal owners was unlawfully assumed for the purpose of unlawfully entering into a Merchant Agreement.

The Merchant or Third Party Agent submitted excessive fraudulent transactions (US$250,000 fraud amount and 1.8 percent (180 basis points) fraud-to-sales amount ratio in any single month) into payment system, and did not adequately remediate.

The Merchant or Third Party Agent generated excessive disputes (1,000 dispute count, and 1.8 percent (180 basis points) dispute-to-sales amount ratio in any single month) into payment system and did not adequately remediate.

The Merchant or Third Party Agent misrepresented the source of submitted transactions (unauthorized aggregation), and/or submitted transactions on behalf of another Merchant (factoring).

The Merchant or Third Party Agent submitted unlawful and/or prohibited transactions into the payment system.

The Merchant or Third Party Agent was terminated at the Acquirer's discretion after identification in a Visa risk compliance program and did not adequately remediate.

The Merchant or Third Party Agent colluded to commit fraud.

The Merchant or Third Party Agent was identified as a location where account data from legitimate transactions was compromised for use in subsequent fraudulent activity (including skimming) and did not adequately remediate.

The principal owners of a Merchant outlet or Third Party Agent was/were convicted of a fraud crime.

The Merchant or Third Party Agent can't fulfill its financial obligations due to potential or actual bankruptcy, insolvency, or suspension of business operations.

The Merchant or Third Party Agent breached their agreement.

The Merchant or Third Party Agent violated the Visa Rules exposing the Acquirer of the payment system to undue risk.

The Merchant or Third Party Agent was non-compliant with the Payment Card Industry Data Security Standard (PCI DSS) and/or the Payment Application Data Security Standard (PA-DSS) requirements.

The Merchant or Third Party Agent suffered a data breach, directly or indirectly resulting in an unauthorized disclosure of payment account and/or transaction information.

The Merchant application was submitted using principal owner and/or corporate officer information belonging to individuals that were never party to the Merchant agreement.

Visa disqualified the Merchant or Third Party Agent from participating in the Visa payment system.