All termsFraudAdvancedUpdated April 10, 2026

What Is MATCH List?

The MATCH (Member Alert to Control High-risk) List is Mastercard's blacklist of merchants and their principals whose accounts were terminated for cause. Being listed can prevent a business from obtaining a new merchant account for up to five years.

Also known as: Terminated Merchant File, TMF, merchant blacklist, Mastercard MATCH

Key Takeaways

  • The MATCH List is Mastercard's mandatory database of terminated merchants — being listed blocks most traditional merchant account applications for five years.
  • Acquirers must add merchants terminated for cause and must query MATCH before approving new merchant applications.
  • There are 14 defined reason codes for MATCH listing; excessive chargebacks and fraud are the most common triggers for e-commerce businesses.
  • Early removal requires the originating acquirer to submit a request — merchants cannot remove themselves directly.
  • Some high-risk processors will still onboard MATCH-listed merchants, but at significantly higher costs and stricter reserve requirements.

How MATCH List Works

The MATCH List operates as a shared intelligence layer between acquiring banks. When an acquirer terminates a merchant relationship for one of Mastercard's 14 defined reasons, they are obligated to submit a record to the database within three business days. That record then becomes visible to every other Mastercard-member acquirer during underwriting. Understanding the mechanics of each step helps merchants know where they stand — and where the leverage points are.

01

Termination Triggers

A merchant account is closed for cause by an acquiring bank. Common triggers include exceeding the chargeback-rate threshold, confirmed fraud, PCI DSS non-compliance, illegal transactions, or a data compromise event. The acquirer documents the reason using one of Mastercard's 14 official reason codes.

02

Record Submission

Within three business days of termination, the acquirer submits a MATCH record through the Mastercard Connect portal. The record captures the merchant's legal name, DBA name, address, TIN, and the personal details of each principal (name, date of birth, ID numbers). Individual principals are listed separately, meaning owners can be flagged even if they open a new legal entity.

03

Database Propagation

The record is immediately available to all Mastercard-member acquirers globally. The MATCH database is not public — only licensed acquiring members can query it. This creates an asymmetry: a merchant may not know they are listed until they are denied a new merchant-account.

04

Underwriting Query

When a new merchant applies for card acceptance, the prospective acquirer is required to run a MATCH check before approval. A positive hit — meaning the applicant's details match an existing record — triggers an automatic review and, in most cases, a denial from mainstream acquirers.

05

Five-Year Retention

Records remain in MATCH for five years from the date of addition. After that window, they are purged automatically. If the adding acquirer determines the record was submitted in error, they can request removal at any time — but the merchant cannot initiate this process themselves.

Why MATCH List Matters

For any e-commerce merchant, the MATCH List represents one of the most severe operational risks in payment processing. Being listed can effectively cut off access to mainstream payment infrastructure overnight, forcing costly workarounds that erode margins and damage customer trust.

Mastercard's own data indicates that merchants listed under Reason Code 4 (excessive chargebacks) had an average chargeback rate of 2.4% in the months preceding termination — more than double the 1% threshold that most acquirers treat as a hard ceiling. Industry research from the Merchant Risk Council estimates that recovering from a MATCH listing costs the average SMB between $15,000 and $50,000 in lost revenue, compliance remediation, and higher processing fees during the first year after finding an alternative processor. A 2023 survey by the Electronic Transactions Association found that 68% of acquirers cited MATCH hits as an automatic disqualifier in their underwriting workflows, underscoring how little discretion most traditional banks apply once a listing is found.

MATCH vs. Visa's VMF

Visa operates a parallel system called the Visa Merchant Screening Service (VMSS), sometimes still referred to by its legacy name, the Terminated Merchant File (TMF). While both databases serve the same purpose, they are maintained separately. A merchant can appear on one, both, or neither. Acquirers processing Visa transactions are expected to screen applicants against VMSS; those processing Mastercard must screen against MATCH. Many acquirers query both simultaneously during underwriting.

MATCH List vs. Chargeback Monitoring Programs

Both MATCH and chargeback-monitoring-programs respond to high chargeback volumes, but they operate at very different stages of the risk lifecycle and carry distinct consequences.

DimensionMATCH ListChargeback Monitoring Programs
Trigger pointAfter account terminationWhile account is still active
Who manages itMastercard (MATCH database)Card networks (Visa VDMP, MC EMP)
ConsequenceBlocks future merchant account applicationsFines, remediation plans, potential termination
Merchant visibilityMerchant often unaware until deniedMerchant notified and placed in program
Resolution pathRequires adding acquirer to request removalExit program by reducing chargeback rate below threshold
Duration5 yearsOngoing until metrics improve
Applies toTerminated merchants and their principalsActive merchants breaching network thresholds

The critical difference is timing. Chargeback monitoring programs are a warning system with structured remediation; the MATCH List is a consequence applied after remediation has failed or the relationship has irreparably broken down.

Types of MATCH List Reason Codes

The MATCH List is not a single undifferentiated blacklist — each record carries one of 14 reason codes that signal the severity and nature of the termination. Acquirers and processors weigh these codes differently during risk assessments.

High-severity codes (virtually no path to mainstream acquiring):

  • Reason Code 7 – Fraud Conviction: Merchant or principal convicted of fraud-related criminal activity.
  • Reason Code 8 – Mastercard Fraud: Merchant identified in a Mastercard fraud investigation.
  • Reason Code 9 – Bankruptcy / Insolvency: Significant unpaid chargeback liability at time of insolvency.
  • Reason Code 12 – PCI Non-Compliance: Merchant failed to maintain PCI DSS standards, especially following a data breach.

Moderate-severity codes (some high-risk processors may still onboard):

  • Reason Code 4 – Excessive Chargebacks: Chargeback rate exceeded network thresholds for two or more consecutive months. Most common code for e-commerce.
  • Reason Code 5 – Excessive Fraud: Fraud-to-sales ratio exceeded acceptable thresholds.
  • Reason Code 6 – Fraud Conviction (Third Party): A third-party agent or ISO connected to the merchant was convicted.

Lower-severity codes (more recoverable with documentation):

  • Reason Code 1 – Account Data Compromise: Data breach exposing cardholder data, without evidence of ongoing fraud.
  • Reason Code 2 – Common Point of Purchase: Card data stolen through merchant's environment.
  • Reason Code 3 – Laundering: Processing transactions for an undisclosed merchant.

Understanding which reason code applies is the first step in any remediation strategy, as it directly determines which acquirers — if any — will consider an application.

Best Practices

For Merchants

Preventing MATCH listing is categorically easier than recovering from one. The most effective controls target the leading causes — chargebacks and fraud — before they escalate to termination thresholds.

  • Monitor chargeback ratios weekly, not monthly. By the time a monthly statement flags a problem, you may already be in a monitoring program. Use your acquirer's reporting portal or a third-party chargeback analytics tool to track ratios in near real-time.
  • Respond to every chargeback dispute, even small ones. Many merchants ignore low-value disputes; acquirers and networks track dispute volume, not just lost amounts.
  • Know your current status before applying for a new account. Authorized representatives can sometimes request an informal MATCH check through their current acquirer. Third-party compliance firms also offer MATCH screening services.
  • Structure contracts carefully. If you are adding a business partner or acquiring a company, check all principals against MATCH before signing. A listed individual becoming a principal at your entity can contaminate your application.
  • If listed, document the root cause resolution. Any high-risk processor willing to onboard a listed merchant will require evidence that the underlying problem has been addressed — chargeback rate data, fraud tool implementations, or legal clearance as applicable.

For Developers and Payment Engineers

Developers building payment integrations or managing merchant onboarding workflows carry responsibility for controls that can directly prevent MATCH-triggering events.

  • Implement fraud scoring at checkout, not just at authorization. Pre-authorization signals (velocity checks, device fingerprinting, proxy detection) reduce fraud-driven chargebacks more effectively than post-authorization tools alone.
  • Build refund-first logic for dispute prevention. Many chargebacks are filed because customers cannot easily reach customer service. An automated refund trigger for high-risk transaction patterns (unusual shipping address, first-time high-value order) can lower chargeback rates before they become a problem.
  • Log and expose chargeback reason codes from your payment-processor to internal dashboards. Grouping codes by root cause (friendly fraud vs. service not received vs. unauthorized) enables targeted remediation rather than blanket policy changes.
  • Test PCI compliance continuously, not just at annual assessment cycles. Automated scanners integrated into CI/CD pipelines catch configuration drift that can lead to data compromises.
  • Use 3D Secure 2.x for liability shift. Properly authenticated transactions shift chargeback liability back to the card issuer for fraud disputes, directly reducing your chargeback rate exposure.

Common Mistakes

Even experienced merchants and payment operations teams make avoidable errors around MATCH exposure.

1. Assuming a new legal entity resets the clock. Incorporating a new company does not protect listed principals. MATCH records include individual owner details, and acquirers query both entity and principal data. If a listed individual owns more than 25% of the new entity, the record will surface during underwriting.

2. Ignoring low chargeback volumes because rates look fine. A merchant processing $50,000/month with 10 chargebacks has a 0.02% rate — apparently healthy. But if processing volume drops to $20,000/month while disputes stay flat, that rate jumps to 0.05%. Rate calculations are volatile for lower-volume merchants; absolute dispute counts also matter to acquirers.

3. Applying to multiple acquirers simultaneously after a denial. Each MATCH query is logged. A burst of inquiries from multiple acquirers in a short window flags the merchant as a risk, making each subsequent acquirer more cautious even before reviewing the application.

4. Conflating the MATCH List with the Terminated Merchant File. These are two separate databases maintained by two separate card networks. Clearing a Visa TMF record does not clear a Mastercard MATCH record and vice versa. Both must be addressed independently.

5. Delaying contact with the adding acquirer. The only path to early removal runs through the acquirer who submitted the record. Many merchants wait months — or years — before making contact. Early, documented outreach to resolve the underlying cause (repaying chargeback losses, for example) is the single most important step toward potential early removal.

MATCH List and Tagada

Tagada's payment orchestration layer helps high-risk and scaling merchants manage the operational risks that can lead to MATCH listing in the first place. Because Tagada routes transactions across multiple acquiring relationships simultaneously, a merchant experiencing chargeback pressure with one acquirer does not have all their volume — and all their risk — concentrated in a single account that could be terminated for cause.

How Tagada reduces MATCH exposure

Tagada's real-time routing engine can redistribute transaction volume away from an acquirer where chargeback ratios are approaching threshold limits, buying merchants time to implement fraud remediation without triggering a termination event. Combined with Tagada's built-in chargeback analytics dashboard, merchants get early warning signals days before acquirer-side thresholds are breached — turning a potential MATCH listing into a manageable operational alert.

For merchants already navigating a MATCH listing and working with a high-risk acquirer, Tagada's orchestration layer provides the redundancy and reporting infrastructure needed to demonstrate improved risk controls — a key requirement for any future mainstream acquiring relationship.

Frequently Asked Questions

What does MATCH stand for in payments?

MATCH stands for Member Alert to Control High-risk Merchants. It is a database maintained by Mastercard and used by acquiring banks worldwide to screen merchant applicants. When an acquirer terminates a merchant account for cause — such as excessive chargebacks, fraud, or PCI violations — they are required to add the merchant's details to the MATCH List so other acquirers can identify the risk before onboarding them.

How long does a business stay on the MATCH List?

Merchants and their principals remain on the MATCH List for five years from the date the record was added. After five years, the record is automatically purged. However, if the underlying reason for listing (such as ongoing fraud) continues with a different entity, a new record can be added, effectively restarting the clock. In rare cases involving illegal activity, the record may be escalated for longer retention.

Can you get removed from the MATCH List early?

Early removal is possible but rare and difficult. The only party who can request removal is the acquirer who originally added the record — not the merchant and not Mastercard directly. A merchant must first resolve the underlying cause (e.g., repay chargeback losses), then persuade the adding acquirer to submit a removal request to Mastercard. Erroneous listings caused by acquirer error are the most commonly removed records.

What are the reasons a merchant gets added to the MATCH List?

Mastercard defines 14 reason codes for MATCH listing. The most common include excessive chargebacks (Reason Code 4), fraud (Reason Code 7 and 8), identity theft, illegal transactions, bankruptcy, PCI non-compliance, and data breaches. Excessive chargebacks — typically a chargeback rate exceeding 1% for two or more consecutive months — is the leading cause for e-commerce merchants. Each code carries different implications for how difficult recovery will be.

Does being on the MATCH List mean I can never get a merchant account again?

Not necessarily, but it becomes significantly harder. While most traditional acquiring banks will decline any applicant found on the MATCH List, some specialized high-risk processors and offshore acquirers may still onboard a listed merchant — usually at higher processing fees, larger rolling reserves, and stricter contract terms. Payment facilitators such as Stripe or Square, however, will almost always deny listed merchants outright.

How do acquirers check the MATCH List?

Acquirers access the MATCH database through Mastercard's secure portal as part of their standard merchant underwriting process. A check typically involves querying the merchant's legal name, DBA name, tax identification number, and the personal details of the business principals (name, address, date of birth). Acquirers are contractually obligated by Mastercard to query MATCH before approving any new merchant application.

Tagada Platform

MATCH List — built into Tagada

See how Tagada handles match list as part of its unified commerce infrastructure. One platform for payments, checkout, and growth.