Friendly Fraud vs. Criminal Fraud: How to Spot the Difference Before It Hurts Your Business
It starts with a dispute notice. A chargeback has been filed against one of your transactions. As a merchant, you’re now in the difficult position of deciding whether to contest it, refund it, or absorb it as a loss. But before you can even think about representment, there’s a critical question you need to answer:
Is it friendly fraud or criminal fraud?
There’s a Difference (And It Matters)
Understanding the difference between these two common types of fraud is more than a technicality. Misclassify the fraud, and you could waste hours building evidence for an unwinnable case. Or worse, you could ignore a recoverable claim and let preventable losses stack up on your books.
Before we look into detection tactics, let’s define what we’re working with.
Criminal fraud, also known as third-party fraud, occurs when someone uses a stolen credit card or compromised payment credentials to make a purchase. The actual cardholder didn’t authorize the transaction and disputes it once they notice the charge. This type of fraud is often the result of phishing, card skimming, or data breaches. There’s no relationship between the buyer and the merchant: just a victim, a thief, and a product.
Friendly fraud, on the other hand, happens when the actual cardholder initiates a dispute on a legitimate purchase. This could be a misunderstanding. Perhaps they forgot about a subscription renewal or didn’t recognize the billing descriptor. But it can also be deliberate: a customer receives a product or uses a service and then falsely claims the charge was unauthorized or the item never arrived.
The result is the same, but the underlying cause is different, and both require a different response.
Spotting the Difference Between Friendly vs Criminal Fraud
1. Start with the Cardholder’s Story
The first clues usually come from the customer’s dispute claim. Banks assign reason codes to every chargeback, and while they’re far from perfect, they’re very useful indicators of what’s going on.
Criminal fraud almost always comes through as “fraudulent” or “unauthorized transaction.” If the customer claims they never made or approved the purchase, and the order was unusual (for example, a $1,200 order of electronics sent to an unfamiliar address), you’re likely dealing with third-party fraud.
But if the dispute is over a product “not received,” a service “not as described,” or a subscription that “was canceled,” friendly fraud may be the real culprit, especially if you’ve got proof that the item shipped or no cancellation request was submitted.
Cross-reference the reason code with your order and customer service records. If the customer never reached out to resolve the issue, it may be a friendly fraud attempt.
2. Examine the Transaction Trail
Next, pull up the transaction data. Friendly fraud leaves very different fingerprints than criminal fraud.
If the billing and shipping addresses match, AVS and CVV checks passed, and 3-D Secure authentication was successful, the transaction is probably legitimate. That doesn’t mean it can’t be disputed; it just means it likely came from the cardholder. And if it later gets charged back, you should prepare a representment case.
But criminal fraud often shows its hand through:
- Mismatched billing and shipping addresses
- High-value orders to freight forwarders or PO boxes
- IP address and geolocation discrepancies
- Failed security checks at checkout
Look for behavior that doesn’t align with how a normal customer would shop. Was the order placed from a country the customer has never interacted with? Did they use a VPN or an anonymous browser? Were there multiple failed attempts before the order went through?
Fraudsters are usually in a hurry. Their transactions reflect that.
3. Check Usage and Delivery Evidence
One of the easiest ways to distinguish friendly fraud is by proving the product or service was received or used.
For digital goods, logins, downloads, or in-app activity are your best friends. If a customer accessed your platform multiple times, completed a course, or streamed content after the charge they’re disputing, that evidence alone can swing a decision in your favor.
For physical products, shipment tracking, delivery confirmation, or even photographs from couriers can be enough to prove the customer received the goods.
Criminal fraud, in contrast, usually involves orders that were diverted elsewhere. If the customer disputes the charge and you can clearly show the package went to an address that doesn’t belong to them (or they never interacted with your service at all), it’s a fair bet they never intended to be your customer in the first place.
4. Understand Their History with Your Business
Friendly fraud often occurs later in the customer relationship. It might be the same shopper who’s bought from you multiple times before. They may have left positive reviews or interacted with support. But now, they’ve filed a chargeback, possibly because they forgot about a recurring charge, didn’t like the product, or thought it would be easier to deal with the bank than your team.
Criminal fraud, by contrast, tends to strike first-time orders. The fraudster is testing stolen card credentials, likely across several merchants in quick succession. These customers disappear as fast as they arrive.
Customer longevity is one of the strongest signals you have. If the disputing buyer has a long history with your brand and the transaction wasn’t out of character, the odds lean toward friendly fraud.
5. Use the Right Tools to Make the Call
Modern fraud detection platforms offer a range of data points that can help merchants separate criminal fraud from customer abuse.
Chargeback alerts, such as those from Verifi (RDR) and Ethoca, can notify you in real time when a dispute is initiated, giving you a chance to resolve it before it becomes a formal chargeback. In many cases, disputes flagged through these tools also indicate whether the customer reported the transaction as unauthorized (likely criminal fraud) or simply dissatisfactory (likely friendly fraud).
In addition, platforms like ChargebackStop can help categorize dispute types, surface relevant transaction data, and even automate refund decisions based on the type of fraud suspected.
The goal isn’t to get it right 100% of the time. It’s to make smarter decisions with less guesswork.
Why the Friendly Fraud vs Criminal Fraud Distinction Matters
Friendly fraud can often be won with strong representment. Criminal fraud, in contrast, is almost always a losing case for merchants.
The data backs this up: merchants recover more than 40% of friendly fraud chargebacks when they submit compelling evidence. But for criminal fraud, win rates typically fall below 10%.
If you fight the wrong battle, you waste time and money. If you ignore the right one, you lose revenue you could’ve recovered.
More importantly, misidentifying fraud can damage your business in other ways. Contesting a dispute filed by a true fraud victim could alienate a potential customer, or worse, result in negative reviews or public backlash. Letting serial friendly fraudsters go unchallenged, meanwhile, can lead to inflated chargeback ratios that put your merchant account at risk.
Tell the Difference with ChargebackStop
Our platform is built with this challenge in mind. ChargebackStop helps merchants distinguish between friendly fraud and criminal fraud using behavioral analytics, transaction monitoring, and real-time alerts.
We give you the context you need to decide whether to fight, refund, or flag a dispute for internal review, fast.
Want to reduce preventable losses and take control of your chargebacks?
Book a free demo and see how ChargebackStop can help you spot the difference and win the battles worth fighting.
