A card scheme penalty (also known as a card network fine or compliance assessment) is a reactive financial fine imposed by card payment networks like Visa, Mastercard or American Express when an acquiring bank, payment service provider or merchant violates network rules or exceeds its thresholds for fraud, disputes, enumeration or message errors. Consequences escalate from monthly fines scaling to $50,000–$100,000+ to forced entry into compliance monitoring programs and, in severe cases, license termination.

Accountability under the Visa Acquirer Monitoring Program (VAMP) is portfolio-wide. Effective January 2026, acquirers must maintain a combined fraud and chargeback dispute ratio under 0.5% of total card-not-present (CNP) transaction volume. Additionally, a separate enumeration ratio targets bot-driven card testing and can independently trigger mandatory monitoring, fines and assessments. While Visa caps the acquirer’s “Excessive” threshold at 0.7%, it sharply reduced the merchant threshold for most global regions (US, Canada, EU, APAC, LATAM) from 2.2% to 1.5% on April 1, 2026.

Staying under thresholds like VISA VAMP’s 0.5% combined fraud-and-dispute ratio means shifting from reactive response to proactive, real-time control. Acquirers need a field-level view across every authorization and clearing transaction so they can continuously monitor card-not-present (CNP) activity, catch card testing and enumeration attacks, and spot “borderline” merchant behavior before it tips the portfolio into non-compliance. A single bad merchant or bot-driven attack can push an entire portfolio over threshold, so catching these signals early, with precision at the transaction level rather than relying on issuer-level detection after the fact, is what keeps acquirers compliant — without generating false positives or disrupting legitimate customer activity.