What Is Zero Liability Protection?

Zero liability protection is the Visa and Mastercard policy that caps a cardholder's loss on unauthorized charges at $0, leaving the fraud loss and the burden of proof on the merchant while excluding commercial cards and unregistered prepaid cards.

‍Zero liability protection is a Visa and Mastercard policy that holds a cardholder to no responsibility for unauthorized transactions made with a lost, stolen, or compromised card. It applies when the cardholder took reasonable care of the card and reported the fraud promptly.

It reaches only charges the cardholder never authorized, and it leaves out certain commercial cards and unregistered prepaid cards like gift cards.

Key takeaways

  • Visa and Mastercard both cap cardholder loss on unauthorized charges at $0.
  • Cardholders qualify by taking reasonable care and reporting the fraud promptly.
  • Zero liability covers fraud claims, while chargeback rights also cover delivery and quality disputes.
  • Reported first-party fraud runs from 14% to 21% of chargebacks.
  • Commercial cards and unregistered gift cards fall outside both network policies.

Why zero liability protection matters for merchants

You absorb the fraud loss and the burden of proving the sale, because on an eligible consumer card a dispute costs the cardholder nothing. Visa says a cardholder won't be held "responsible for unauthorized charges" on their account, online or off.

A customer who guesses wrong still gets the money back. And their bank would rather close the claim fast than dig into it.

That leaves you as the only party who can lose money on the sale.

On a card-not-present order, you also have to prove the buyer said yes to it.

Run your own unauthorized-charge dispute count through our ROI calculator to see what that $0 downside is costing you.

Summary: A $0 downside for the cardholder means the fraud loss and the proof burden both land on you.

Zero liability protection vs. chargeback rights

Zero liability is a network promise covering fraud alone, while chargeback rights cover fraud plus every non-fraud complaint a buyer can raise. Undelivered goods, wrong items, and duplicate charges are all chargeback grounds that zero liability never reaches.

The two also start differently. A cardholder gets zero liability with one phone call, and the bank settles it under the network's rules. Chargeback rights need a reason code, and only one family of codes covers fraud.

So look at what the buyer is actually claiming, because the word "chargeback" covers both.

Friendly fraud sits in the gap those two rules leave. A buyer who calls their own purchase unauthorized gets a guaranteed $0 outcome under a code the facts don't support.

First-party fraud accounts for 21% of all chargebacks.

Once you know the claim is coded as fraud, stop arguing the coding and prove the buyer authorized the order. Send four things:

  • The address verification (AVS) and card security code (CVV) match from the order.
  • The device and IP record captured at checkout.
  • The delivery confirmation, with a signature or a tracking scan.
  • Any login or usage history showing the buyer used what they bought.

Summary: Zero liability answers fraud claims only, so a miscoded dispute is beaten with evidence, not a rules argument.

Zero liability protection vs. Regulation E

Zero liability sets cardholder loss at $0 by network choice, while Regulation E is the federal rule beneath it that still allows real loss. In the US, Reg E can leave a consumer owing anywhere from $50 up to the full amount.

Which figure applies comes down to how fast the customer reported it. Our Regulation E glossary entry has the three tiers and the bank's investigation clock.

Visa and Mastercard pay $0 no matter how fast the customer reported it, so the tiers never come up.

Say your customer's debit card is stolen and run for $600, and they call the bank on day three.

Under Reg E alone, the bank could leave them owing as much as $500. Zero liability drops that to nothing.

The two rules differ most on which cards they cover. An unregistered prepaid card or a commercial card sends the customer's loss back to Reg E's tiers, which top out at unlimited for a late report.

Many commercial cards sit outside Reg E as well, so those carry no federal cap either, and your dispute follows whichever rule the issuer picks.

Summary: The law allows $50 to unlimited cardholder loss, and the networks voluntarily set it at $0 instead.

FAQ

Does zero liability cover a charge I don't recognize?

No, an unrecognized charge is not automatically an unauthorized one. Check the billing descriptor first, then old free trials and family members on the account, before you call it fraud.

Do I need to sign up for zero liability protection?

No, Visa and Mastercard apply it automatically to eligible consumer cards. You still have to take reasonable care of the card and report loss or theft promptly.

Does zero liability apply to prepaid or gift cards?

No, both networks exclude unregistered prepaid cards and anonymous prepaid transactions. Registering a prepaid card with the issuer can bring it inside the policy.

Riduci il tasso di controversie oggi

Unisciti a oltre 800 aziende che utilizzano Chargeback per prevenire i chargeback automaticamente: la configurazione richiede meno di 2 minuti.