Restaurant chargebacks and payment disputes: how you lose money on your own sales
What a chargeback really costs, why delivery and online orders carry the risk, friendly fraud, the EMV liability shift, and how to prevent and win disputes.

A chargeback is the rare way a restaurant loses money on a sale it already made: the food went out, the payment came in, and weeks later the bank yanks the money back and adds a fee on top. You're out the meal, the revenue, and the penalty. Most operators treat chargebacks as random noise from the payments world. They're not random — they cluster in predictable places, they're rising, and a chunk of them are preventable. Here's the operator's map.
What actually happens in a chargeback
A chargeback is a forced reversal initiated by the cardholder's issuing bank, not by your processor. The flow: the cardholder disputes a charge, their bank pulls the funds from your account, your processor notifies you, and you either eat it or contest it through "representment" — submitting evidence (receipt, delivery confirmation, signage) with a rebuttal. The whole thing runs 60–90 days, and your response window is tight and shrinking — Mastercard now sets 30 days for digital/card-not-present goods versus 45 for physical, and some processors give as little as nine days. Miss the window and you forfeit by default.
The detail that stings: even when you win, the chargeback fee isn't refunded, and the dispute still counts toward your ratio.
Where the risk actually lives: off-premise
Not all sales carry equal chargeback risk, and the split matters for a restaurant because of where the industry's revenue has moved. Card-not-present transactions — online ordering and delivery — run a chargeback rate around 0.6–1.0%, versus about 0.5% for card-present, and CNP fraud losses run roughly 15× higher as a share of volume. In plain terms: the dine-in swipe is low-risk; the delivery and online order is where disputes are born. As off-premise has grown to most of restaurant traffic, so has your chargeback exposure — another hidden cost of the channel beyond the commission.
Friendly fraud: the dispute that isn't fraud
The fastest-growing category is "friendly fraud" (first-party misuse) — a real customer disputes a charge they actually made, sometimes dishonestly ("I don't recognize this"), sometimes honestly (a family member ordered, or they forgot). It's now estimated at ~36% of all fraud cases and, in some merchant categories, the majority of disputes. And it's brutal to fight: US merchants win a bit over half of all chargebacks on average, but only about 17% of fraud-coded ones.
The true cost runs well past the disputed amount. Between the chargeback fee (~$15–$25), the lost product, the lost sale, and the labor to fight it, merchants lose an estimated $4.61 for every $1 of actual fraud. And if your dispute ratio climbs too high, the card networks escalate: Visa's monitoring program now flags merchants above a 2.2% ratio as "excessive" (dropping to 1.5% in North America in 2026) — which brings fines and higher fees. (Note the old 0.9% threshold you may have read about was retired in 2025.)
The EMV liability shift — dip, don't swipe or key
One rule quietly decides who eats card-present fraud. Since October 2015, liability for counterfeit-card fraud falls on whoever used the less secure technology. If a chip card is presented and your staff swipes the magstripe or keys the number when they could have dipped, and it turns out counterfeit — you're liable, not the bank. Counterfeit fraud dropped about 70% at EMV-enabled merchants after the shift, precisely because the chip moved the liability. The staff rule is one sentence: dip or tap; only key when the terminal tells you to. This is the same "how you accept the payment decides who carries the risk" logic that runs through card surcharging and tip vs. service-charge handling.
How to prevent — and win — disputes
The preventable ones cluster around a few habits:
- Use EMV chip and contactless for every in-person sale. Dip or tap, never swipe or key by choice.
- Fix your billing descriptor. A clear business name plus phone or website on the statement means a confused customer calls you first instead of disputing — that single change kills a lot of "I don't recognize this charge" friendly fraud.
- Keep the paper. Itemized receipts, delivery confirmations, and transaction records are your representment evidence; no evidence, no win.
- Lock down online/delivery orders. Address verification (AVS), CVV checks, and 3D Secure on your card-not-present channel — the high-risk one — and flag those transactions correctly as internet or phone orders.
Disclosure: I work at Katalyst, and our payments side is built to hit the chip, descriptor, and documentation basics by default, so read the bias in. But none of the above is proprietary — it's EMV, clear descriptors, and evidence discipline, and any operator can do it. Chargebacks are one of the few losses in this business you can actually engineer down: accept payments the secure way, make your charge recognizable, and keep the receipts. The money you're losing on your own completed sales is mostly money you can keep.
Related Katalyst products
Topics
See how Katalyst handles your service style
A 30-minute walkthrough of the platform, tuned to how your restaurant actually runs.



