Mastercard Chargeback Reason Code 4837: No Cardholder Authorization

When a Mastercard cardholder tells their bank “I didn't make this purchase,” the result is reason code 4837. It's Mastercard's primary fraud-category chargeback, and if you accept Mastercard payments online, you're going to encounter it.

Reason code 4837 is Mastercard's equivalent of Visa's 10.4, but with some important differences in evidence requirements, response timelines, and the concept of “transaction modifiers” that change what proof you need depending on the specifics of the purchase. Understanding these nuances is the difference between winning and losing your dispute.

What Mastercard Reason Code 4837 Actually Means

Code 4837 falls under Mastercard's “Fraud” category. The official label is “No Cardholder Authorization,” meaning the cardholder is claiming they did not authorize or participate in the transaction. This is an umbrella code — it covers a wide range of specific scenarios that used to have their own individual codes but have been consolidated under 4837.

Unlike Visa, which separates card-present fraud (10.3) from card-absent fraud (10.4), Mastercard uses 4837 for both. Whether the disputed transaction happened in-store with a physical card or online with manually entered card details, the code is the same. The distinction between scenarios is handled through transaction modifiers — additional data in the chargeback message that specifies the exact circumstances of the dispute.

These transaction modifiers matter because they dictate what evidence you need to fight the chargeback. A modifier indicating a recurring transaction requires different proof than one indicating a site-to-store pickup or a digital goods download. Always check the modifier before assembling your response.

Time Limits

Here's one of the key differences from Visa: Mastercard gives you 45 calendar days to respond to a 4837 chargeback, compared to Visa's 30 days. This extra time can be valuable for gathering evidence, but don't let it create false comfort — start collecting documentation immediately.

The issuer has 120 calendar days from the transaction processing date to file the chargeback.

Missing your 45-day response window means automatic loss, regardless of the strength of your evidence. Some acquirers may require your response before the full 45 days (they need processing time of their own), so check with your processor for their specific deadline.

Common Triggers for 4837 Chargebacks

True fraud with stolen credentials. A criminal used stolen card data to make a purchase. The real cardholder had no involvement. For card-not-present transactions, this is the most straightforward type of 4837 — and the hardest to fight without strong authentication data.

Card-present fraud without proper verification. The physical card was used at a terminal, but without proper PIN verification or with a contactless transaction that exceeded the CVM (cardholder verification method) limit.

Friendly fraud. The cardholder made the purchase but disputes it anyway. They may not recognize the charge, may have buyer's remorse, or may be intentionally trying to get something for free. Family members using the cardholder's account without explicit permission also falls here.

Unrecognized billing descriptor. The merchant name on the cardholder's statement doesn't match what they expect. They assume it's fraud and call the bank.

Recurring billing disputes. The cardholder agreed to a subscription but later disputes the charges, claiming they never authorized recurring billing. This is especially common when the free trial converts to a paid subscription.

What Evidence You Need to Win

The evidence required for 4837 depends heavily on the transaction modifier. Here's a breakdown by scenario:

General Requirements (All Scenarios)

Your response must include at least one of the following:

• Documentation and explanation that refutes the cardholder's claim
• Proof the chargeback is invalid because it doesn't adhere to Mastercard's specific requirements
• Proof you already issued a refund
• Proof the cardholder withdrew the dispute

Card-Not-Present (Online) Transactions

For ecommerce disputes — the most common scenario:

• Mastercard SecureCode (3D Secure) authentication records. If the transaction was authenticated through SecureCode, provide proof. Like Visa's 3D Secure, this shifts liability to the issuer.
• CVC2 validation. Proof that you requested and received a CVC2 match from the issuer.
• AVS results. Address verification showing the billing address matched the issuer's records.
• Prior undisputed transaction history. Evidence that the same card was used in earlier transactions that weren't disputed, especially from the same device or IP address.
• Customer account data. Login history, device fingerprints, and browsing behavior showing the cardholder has a pattern of legitimate purchases.
• Delivery confirmation. Proof that goods were shipped to and received at the cardholder's address.

Recurring Transactions

When the modifier indicates a disputed recurring charge:

• The original subscription agreement showing the cardholder opted in to recurring billing, with timestamps.
• Proof the transaction was properly identified as recurring at the time of authorization and clearing.
• Cancellation records. If the cardholder claims they cancelled, show that you never received a cancellation request.
• Usage records. Evidence the cardholder continued to use the service during the disputed billing period.

Site-to-Store / In-Store Pickup

If the customer ordered online and picked up in store:

• Signed pickup receipt or other documentation showing the cardholder received the goods in person.
• ID verification records from the pickup, if applicable.

Digital Goods

For downloadable content, software, or digital services:

• Written confirmation that the cardholder registered to receive electronic delivery.
• Download logs showing the content was accessed from the cardholder's device.
• Account activity showing post-purchase usage.
• Evidence the cardholder registered the product (e.g., for warranty or software updates).
• SecureCode authentication if available.

Airline / Travel Transactions

If the modifier indicates a CNP airline transaction:

• Boarding pass, ticket, or flight manifest with the passenger's name.
• Related purchases tied to the disputed transaction (seat upgrades, baggage fees, in-flight purchases).
• Documents establishing a relationship between the passenger and the cardholder.

Need help structuring your response? Use our free chargeback response letter template — it covers fraud disputes like 4837 with labeled exhibit references tailored to your transaction modifier.

How to Structure Your Response

Mastercard's 4837 requires a more tailored approach than a generic chargeback response. Your letter should:

Identify the modifier. State which specific 4837 scenario you're responding to.

Match evidence to the modifier. Don't submit generic documentation. If the modifier is “recurring transaction,” your evidence package should focus on the subscription agreement and cancellation records, not on shipping tracking.

Label exhibits clearly:

• Exhibit A: Transaction authorization and authentication records (SecureCode, CVC2, AVS)
• Exhibit B: Customer identification data (account info, device matching, IP data)
• Exhibit C: Fulfillment proof (delivery confirmation, pickup receipt, or digital access logs)
• Exhibit D: (Modifier-specific) Subscription agreement, prior transaction history, or airline boarding pass
• Exhibit E: Customer communication records

Be concise but complete. Mastercard reviewers don't want a novel. Present the facts, reference the exhibits, and make a clear request for reversal.

For a detailed response letter template, see our Chargeback Response Letter Guide.

Common Mistakes That Lose 4837 Disputes

Ignoring the transaction modifier. Submitting evidence for an online purchase when the modifier indicates a recurring billing dispute — or vice versa — will lose your case. Read the modifier carefully.

No authentication records. For card-not-present 4837 disputes, the bank wants to see that you verified the cardholder's identity. If you didn't request CVC2 or use SecureCode, your defense is significantly weakened.

Treating 4837 like Visa's 10.4. The codes are similar in concept, but the evidence requirements and response timelines are different. Don't copy-paste your Visa response template for a Mastercard dispute.

Submitting evidence after the 45-day window. Even though 45 days seems generous, acquirers often need documents several days before the Mastercard deadline. Know your processor's internal cutoff.

No delivery proof for physical goods. Even in a fraud dispute, showing that the merchandise was delivered to the cardholder's verified address supports your case.

How to Prevent 4837 Chargebacks

Implement 3D Secure / Mastercard SecureCode. This is the single most effective prevention tool. When authentication succeeds, liability for fraud shifts to the issuer.

Always request CVC2 and AVS. Configure your payment gateway to collect the CVC2 code and verify the billing address on every transaction. Consider declining transactions where both fail to match.

Use a clear billing descriptor. Make sure your business name appears clearly on cardholder statements. Include a phone number or URL so confused cardholders can contact you directly instead of calling their bank.

Implement fraud screening. Use tools that analyze device fingerprints, IP geolocation, purchase velocity, and behavioral patterns. Flag suspicious transactions for manual review before fulfillment.

For recurring billing, confirm and remind. Send confirmation emails when a subscription starts, reminders before each renewal, and clear receipts after each charge. Make the cancellation process straightforward and instant.

Collect and store transaction data. Device IDs, IP addresses, account login history, and shipping addresses. This data is essential for proving the cardholder participated in the transaction when they claim otherwise.

Monitor your chargeback ratio. Mastercard's Excessive Chargeback Program imposes penalties and fees on merchants who exceed threshold ratios. Track your numbers monthly and investigate spikes immediately.

Real-World Scenario: Winning a 4837 Dispute

A DTC skincare brand received a 4837 chargeback for $89 on a Mastercard transaction. The chargeback modifier indicated a card-not-present online purchase. The customer claimed they never authorized the transaction.

The merchant checked their records and found: the order was placed from an IP address in Dallas, Texas — the same city as the cardholder's billing address. The same Mastercard number had been used for three prior orders over the past six months, none of which were disputed. The customer had an account on the site created eight months earlier, and the disputed order was placed while logged into that account. The package was shipped to the same address as the three previous orders and was delivered with USPS tracking confirmation.

The merchant organized their response with five exhibits: Exhibit A showed the CVC2 match and AVS full match. Exhibit B presented the three prior undisputed transactions with matching IP address and device fingerprint. Exhibit C included the customer's account creation date, login history, and the fact that the disputed order was placed while logged in. Exhibit D provided complete shipping and delivery records. Exhibit E showed the billing descriptor as it would appear on the customer's statement.

The chargeback was reversed within three weeks. The key was the combination of prior undisputed transaction history with matching device data.

Understanding Mastercard's Excessive Chargeback Program

If your 4837 chargebacks push you above the threshold, Mastercard's Excessive Chargeback Program (ECP) kicks in. The program has two tiers:

Excessive Chargeback Merchant (ECM): You exceed 100 chargebacks AND a 1.5% chargeback-to-transaction ratio in a calendar month. Consequences include additional per-chargeback fees and a mandatory remediation plan.

High Excessive Chargeback Merchant (HECM): You exceed 300 chargebacks AND a 3.0% ratio. Consequences are more severe — higher fees, potential fines, and risk of losing your Mastercard processing privileges entirely.

Prevention is far cheaper than remediation — every 4837 chargeback you prevent keeps you further from these thresholds.

For a full evidence checklist by dispute type, see our Chargeback Evidence Guide.

Mastercard 4837 vs. Visa 10.4

Related Reason Codes

Equivalent codes on other networks:

• Visa 10.4 — Other Fraud, Card-Absent Environment
• Visa 10.3 — Other Fraud, Card-Present Environment
• American Express F24 — No Cardholder Authorization
• American Express F29 — Card Not Present
• Discover UA01 / UA02 — Fraud, Card Present / Card Not Present

Within Mastercard's system:

• Mastercard 4853 — Cardholder Dispute
• Mastercard 4834 — Point of Interaction Error
• Mastercard 4849 — Questionable Merchant Activity
• Mastercard 4870/4871 — Chip Liability Shift

FAQ

What are “transaction modifiers” and why do they matter?

Transaction modifiers are additional codes in the chargeback message that specify the exact circumstances of the disputed purchase. They tell you whether it was an online transaction, a recurring charge, a site-to-store pickup, a digital goods download, etc. The modifier determines what evidence you need, so always check it before building your response.

I have Mastercard SecureCode authentication. Can I still lose a 4837 chargeback?

Successfully authenticated SecureCode transactions should shift fraud liability to the issuer. If you received a 4837 chargeback on a fully authenticated transaction, provide the authentication records — the chargeback may have been filed incorrectly. However, authentication doesn't protect against all dispute types.

How is the 45-day response window calculated?

The 45-day clock starts from the chargeback processing date — not the date you receive notification. Since there can be a delay between processing and notification, you may have fewer than 45 days in practice. Check the chargeback processing date in your dispute portal and work backward to set your actual deadline.

A family member made the purchase. How do I handle this?

Family fraud is common with 4837. If you can show the purchase was made from a device that matches previous legitimate orders, or delivered to the cardholder's address, or the purchaser's name is associated with the cardholder's account, present this evidence. The bank may still side with the cardholder, but evidence of a household connection strengthens your case.

Can the same transaction be charged back under both 4837 and 4853?

No, only one reason code applies to a given chargeback. However, if your initial defense succeeds and the chargeback is reversed, the issuer could potentially re-file under a different code if the facts support it. This is why it's important to address the cardholder's actual concern, not just the specific reason code.