Vape Chargebacks: How to Prevent and Win Disputes

A chargeback happens when a customer asks their card-issuing bank to reverse a charge instead of asking you for a refund. The bank pulls the money back from your account, and you get one chance to answer with evidence.

1. 1The customer disputes the charge. They usually have up to 120 days, counted from the sale or, for goods delivered later, from the expected delivery date.
2. 2The money comes back out of your account. Your processor debits the sale amount and notifies you, usually with a chargeback fee.
3. 3You respond with evidence (called "representment"). Network rules give the processor about 30 days for Visa and 45 days for Mastercard, but it needs time to file, so your own deadline is often just 7–20 days.
4. 4The customer's bank decides. If you win, the money comes back. Either side can escalate to arbitration, which adds more fees.

The cost: processors commonly charge $15 to $100 per chargeback, win or lose, with high-risk accounts toward the top of that range. You may also lose the sale and the product.

The card networks measure your dispute ratio every month. Cross their limits and your processor faces fines. It usually passes them on as reserves, extra fees or account closure, even on a vape merchant account set up for what you sell. Here are the exact numbers, as of September 2026.

Why this matters more for vape: one industry guide claims vape stores see a "natural" chargeback rate of 1% to 2%. That's a competitor's claim, not a card-network figure, but if it's close, a busy online vape store sits right next to Visa's 1.5% line before anything goes wrong.

Three things to know:

• Visa's limit is 1.5%, not "1.5% of transactions." It's fraud reports plus disputes, measured only against your online and phone sales, and it applies once you reach 1,500 in a month. It was 2.2% until April 1, 2026. You may also see 0.9% quoted online; that was the early-warning level of Visa's older program, which VAMP replaced in 2025.
• Visa counts fraud reports too. A customer's bank can report a sale as fraud even if no chargeback follows, and it still counts toward your VAMP ratio. A parent who reports a minor's purchase as fraud adds to it.
• Your processor's limit is probably lower. Visa also measures processors on their whole portfolio, so most step in long before a small store reaches 1,500 disputes. Ask yours what its internal limit is.

Online tobacco sales also carry card-network registration rules. Our vape payment compliance guide covers MCC 5993 and registration.

Generic chargeback advice is written for stores that ship T-shirts. A vape store sells an age-restricted product that must be signed for by an adult, often on repeat orders. That creates its own dispute patterns.

Most of the evidence that wins a vape dispute comes from steps online sellers already have to take. The work is keeping it, per order, where you can find it in minutes.

• Age-verification record: the result, date and time of the database check for each order, and the name and address it matched. See our guide to PACT Act age verification and adult-signature delivery for what the law requires.
• Adult-signature proof: the carrier's delivery confirmation with signature, date and ID-check note. Download it when the order is delivered; carrier portals don't keep it forever.
• Clear checkout terms: refund and return policy, the adult-signature requirement, and what happens to a returned package, accepted with a required checkbox before payment.
• A recognizable descriptor: your store name and contact details on the customer's statement.
• Fast, easy refunds: refund to the original card, when you said you would. A customer who gets their money back rarely calls the bank.
• A reachable support line: a phone number and email on the site and in order emails, answered within a business day.

Online sellers must keep PACT Act delivery-sale records until the end of the fourth full calendar year after the sale, which is far longer than any chargeback window. If you're keeping them for the law, you're keeping them for disputes too.

Answer the customer's specific claim with dated records. Match the evidence to the reason:

Write a short cover letter. Walk the reviewer through the timeline in plain language: ordered, age verified, shipped, signed for by an adult on this date. Reviewers read quickly, so lead with your strongest document.

Repeat online customers: for Visa fraud disputes on online orders, Visa's Compelling Evidence 3.0 rules can shift liability back to the card-issuing bank when the same customer made at least two earlier undisputed purchases 120–365 days before, with matching details such as IP address or device and shipping address. Your gateway records supply this data. More in signs of card-not-present fraud.

Auto-ship is convenient for repeat adult customers, but recurring charges are a common source of chargebacks. Most start as "I cancelled" or "I didn't recognize this charge."

• Clear sign-up terms: price, how often you charge, the next billing date and exactly how to cancel. Get a required checkbox.
• A reminder before each charge, and before any trial or discounted price ends.
• Easy online cancellation, confirmed in writing, with billing stopped right away.
• Adult signature on every shipment. Under the PACT Act, each delivery needs an adult signature and ID check, not just the first. That also means every shipment has its own delivery proof.

Many states also have automatic-renewal laws with their own disclosure and cancellation rules. Authorize.Net's Automated Recurring Billing and Customer Information Manager handle the scheduling and stored cards. Our guide to accepting credit cards on an online vape store covers the rest of the setup.

Every fraud dispute you prevent also keeps a fraud report off your Visa VAMP count. Authorize.Net's fraud prevention tools let you set rules that flag, hold or decline risky orders before they ship:

• AVS and CVV checks: hold orders where the billing address or security code doesn't match.
• Velocity limits: catch many orders or card attempts in a short time, a common sign of card testing.
• IP address rules: block or review orders from addresses with a history of fraud.
• Shipping and billing mismatch: review orders that ship somewhere other than the card's address.
• Amount filters: review unusually large first orders.

Fraud filters and age verification do different jobs. Filters check the card; the age check confirms the buyer is an adult. You need both. Held orders are worth a quick phone or email check before you ship.

Processors usually act in steps. What yours does depends on your agreement, but expect some of these:

1. A warning and questions. Why are disputes up, and what are you changing?
2. A remediation plan with dates, often covering fraud filters, descriptors and refund policy.
3. A reserve or a higher one. Part of each payout is held to cover future chargebacks. See vape rates, fees and reserves.
4. Network fines passed through if you stay above a Visa or Mastercard limit.
5. Account closure, and in serious cases a listing on Mastercard's MATCH list, which makes a new account much harder to get.

Act early. Call your processor before it calls you, with your numbers and a plan. If your account has already been closed, our guide on what to do when a vape merchant account is shut down covers the next steps.