Reason codes / VMSS codes / VMSS 27: Common Point of Purchase (CPP)
VMSS code 27: Common Point of Purchase (CPP)
Official definition and what it means for your removal request.
Definition
The Merchant or Third Party Agent was identified as a location where account data from legitimate transactions was compromised for use in subsequent fraudulent activity (including skimming) and did not adequately remediate.
What this means in plain language
Card data was skimmed or stolen at this location from otherwise legitimate sales, then used in fraud elsewhere. You are marked as the weak point where the compromise occurred, and Visa says remediation fell short.
What you can do
If you were listed under VMSS code 27, you can submit a formal removal request to the PSP or acquirer that added you. They will review your case and, if satisfied, can request removal from the VMSS list. We help you draft and submit that request. See VMSS removal and all MATCH and VMSS reason codes.