Mastercard · Fraud
Reason code 4837: No Cardholder Authorization
Reason code 4837 is Mastercard's primary fraud chargeback, filed when a cardholder claims they neither authorized nor participated in a transaction. It covers true fraud from stolen card data as well as friendly fraud where the cardholder disputes a purchase they actually made. Following Mastercard's dispute consolidation, code 4863 (Cardholder Does Not Recognize) was retired and those disputes are now filed under 4837.
Issuer filing window
typically 120 days from the central site business date
Merchant response window
typically 45 days to respond via second presentment
Why 4837 chargebacks happen
- A fraudster used stolen card credentials to complete a card-not-present purchase on your site.
- A family member or employee used the card without the account holder's knowledge, and the account holder disputes the charge as unauthorized.
- The cardholder does not recognize your billing descriptor on their statement and reports the charge as fraud instead of contacting you.
- A customer commits friendly fraud by claiming a legitimate purchase was unauthorized to obtain a refund while keeping the goods.
- Card testing bots ran small authorizations through your checkout, and the small approved charges were later disputed by the real cardholders.
How to fight a 4837 chargeback
- Submit AVS and CVC2 match results from the original authorization showing the cardholder's verified address and security code were provided.
- Provide device fingerprint, IP geolocation, and any 3DS authentication data linking the transaction to the cardholder's known device or location.
- Show a history of prior undisputed transactions from the same account, device, or shipping address to establish a pattern of legitimate use.
- Include delivery confirmation with signature to the cardholder's verified billing address for physical goods, or access and usage logs for digital goods.
- File the second presentment through Mastercom within the 45-day window, and attach evidence of any direct communication with the customer about the order.
How to prevent 4837 chargebacks
- Enforce 3DS (Mastercard Identity Check) on risk-scored transactions; a fully authenticated transaction shifts fraud liability to the issuer and blocks most 4837 filings.
- Use AVS and CVC2 checks with decline rules for full mismatches rather than treating them as advisory signals.
- Set a clear, recognizable billing descriptor that matches your brand name and includes a customer service phone number.
- Deploy velocity limits and bot detection at checkout to stop card testing runs before approved authorizations settle.
- Enroll in Ethoca alerts and issuer collaboration tools so confirmed fraud can be refunded before it becomes a chargeback.
Frequently asked questions
- Can I win a 4837 chargeback without 3DS authentication?
- Yes, but the bar is higher. You need compelling evidence tying the cardholder to the purchase, such as matching AVS data, a prior transaction history on the same device, proof of delivery to the verified billing address, or usage logs for digital products. Without 3DS, representment on 4837 comes down to how convincingly you can show the real cardholder participated.
- What is the difference between 4837 and 4863?
- Code 4863 covered transactions the cardholder did not recognize and suspected might be fraud, while 4837 is an outright claim of no authorization. Mastercard retired 4863 and consolidated those disputes into 4837, so today unrecognized-transaction claims arrive under this code.
- Does a won 4837 representment remove the chargeback from my ratio?
- No. Mastercard counts first chargebacks against your monitoring program metrics regardless of the representment outcome. Winning recovers the funds but does not repair your chargeback-to-transaction ratio, which is why prevention matters more than fighting for high-risk merchants.
Related Mastercard codes