Chargebacks in travel: protect every card payment before you charge it

Chargebacks 101, in plain English

A chargeback is a forced refund. Instead of asking you for their money back, the cardholder asks their bank, and the bank pulls the funds out of your account while the case is decided. Chargebacks exist to protect consumers from fraud, and most of the time they do exactly that. But the same mechanism lets anyone dispute a legitimate charge months after you delivered the trip.

Four players are involved in every dispute:

• The cardholder. Your customer, or someone claiming to be.
• The issuing bank. The bank that gave your customer their card. It hears the complaint first, and it starts on the customer's side.
• The card network. Visa or Mastercard. They set the rules and deadlines of the dispute process.
• You and your acquirer. The acquirer is the bank or processor that accepts card payments on your behalf and passes the dispute on to you.

When a dispute is filed, the issuing bank assigns it a reason code, a short code that states why the customer is disputing (fraud, service not received, charge not recognized). Your response has to answer that specific reason, not disputes in general.

Not all disputes are the same. There are three kinds:

• True fraud. A stolen card or card number was used. The real cardholder never bought anything from you.
• Friendly fraud. The real cardholder made the purchase, then disputes it anyway. Sometimes it is a genuine mix-up: a spouse booked the trip, or the charge on the statement was unrecognizable. Sometimes it is buyer's remorse dressed up as fraud.
• Service disputes. The customer believes they did not get what they paid for: a downgraded room, a canceled tour, a trip that did not match the promise.

Travel is consistently among the industries with the most disputes, and the profile of a travel sale explains why: high amounts, weeks or months between payment and the trip, and card-not-present transactions. Card-not-present means the physical card was never tapped or inserted, as with payment links or bookings taken over the phone. Networks treat these as higher risk, and the burden of proof falls on you.

What a chargeback actually costs

The sticker price of a lost dispute is bigger than the booking amount.

The sale itself. On a $4,000 package, the full amount leaves your account when the dispute is filed. If you already paid the hotel and the airline, that money is gone regardless of the outcome.

The chargeback fee. Your processor charges a fee for each dispute, commonly somewhere between $15 and $50, and you usually pay it even if you win.

Staff time. Someone has to pull records, write the response, and hit a short deadline. On a small team, that someone is usually you.

The ratio risk. Card networks track your dispute rate, the number of disputes divided by your number of transactions. As a general reference, Visa's monitoring threshold sits around 0.9% and Mastercard's around 1.5%. Cross those lines and you can face fines, extra scrutiny, and in serious cases the loss of your ability to accept cards.

Here is why that last point matters for an agency your size: if you process 100 card payments a month, a single dispute puts you at 1%. Two puts you at 2%. Small agencies do not get to absorb disputes quietly. Prevention is not optional, it is the whole game.

Prevention: what to do before you charge

Everything in this section happens before the card is charged. That is the point. Once the charge goes through, you are reacting; before it goes through, you are in control.

Verify that the cardholder is your booker

Check that the name on the card matches the person booking. Use AVS, the Address Verification Service, which checks the billing address the customer gives you against what their bank has on file. Always require the CVV, the three-digit security code on the back of the card. For large bookings, say above $2,000, ask for a photo of a government ID with a name that matches the card. Framed as protecting their card, almost no legitimate customer objects.

Use 3D Secure on card-not-present payments

3D Secure (3DS) adds a verification step where the customer's own bank confirms it is really them, usually through a code or an approval in their banking app. It matters for one big reason: the liability shift. On a transaction authenticated with 3DS, responsibility for a fraud dispute generally moves from you to the issuing bank. For payment links on a $5,000 tour, that is the closest thing to insurance you can get at checkout.

Make your statement descriptor recognizable

The billing descriptor is the text that appears next to the charge on your customer's card statement. If your legal entity is "RMT Holdings LLC" but you sell as "Sunrise Tours", the customer will not recognize the charge, and unrecognized charges become disputes. Ask your processor to set a descriptor with your trade name, and ideally a phone number.

Get written authorization for the exact amount

Before charging, get the customer's written agreement to the exact amount, with a timestamp. A signed authorization form or a checkout confirmation both work. A quote is not authorization. "Charge whatever the total comes to" is not authorization. The document should say who is paying, how much, for which trip, and when they agreed.

Make the cancellation policy an active step

Do not bury your cancellation and refund policy in fine print. Make the customer tick a box or reply in writing confirming they read and accept it, before the payment. A timestamped acknowledgment of your policy is one of the strongest pieces of evidence you can hold in a service dispute, and it also prevents disputes by setting expectations up front.

Watch the red flags

Some bookings deserve a slower look:

• The cardholder is not one of the travelers.
• The booking is last minute and the buyer is pressuring you to rush.
• The billing country does not match the customer's story.
• The buyer resists every verification step.

A red flag does not mean decline. It means verify more before you charge, not after.

Build your evidence file at the moment of sale

Here is the mindset shift that separates agencies that win disputes from agencies that lose them: assume every transaction will be disputed, and file accordingly.

At the moment of sale, save into one folder per booking:

• The itinerary and confirmation, sent to the customer's email and logged with the date.
• The signed or checkbox-timestamped terms, including the cancellation policy acknowledgment.
• The communication trail. Emails and WhatsApp conversations where the customer requests, confirms, and discusses the trip. Export them, do not trust the app to keep them.
• Proof of delivery for e-tickets, vouchers, and hotel confirmations: the sent email, and delivery or read receipts where available.
• The verification results from your processor: AVS match, CVV match, 3DS authentication.

If the trip goes perfectly, you never open the folder. If a dispute lands eight months later, you answer it in an afternoon instead of reconstructing a sale from memory.

This takes minutes per booking when it is part of your sales routine. It takes days when you try to do it backwards under a deadline.

If a dispute arrives anyway

Even careful agencies get disputes. What matters then is process, not panic.

Act immediately. Response windows are short, often 20 to 30 days from the notice, and processors need time to submit on your behalf. Treat a dispute notice like a flight departure, not like mail.

Match your evidence to the reason code. The process of fighting a chargeback by submitting evidence is called representment. If the reason code says fraud, lead with identity: AVS, CVV, 3DS, the ID you collected. If it says services not provided, lead with delivery: vouchers sent, hotel check-in confirmed, the beach photo they posted. Evidence that does not answer the code does not count, no matter how much of it you send.

Write a short, factual cover letter. One page. What was purchased, when, for how much, what was delivered, and where in the attachments the proof lives. Banks review thousands of these; make yours easy to rule on.

Do not refund after the chargeback is filed without understanding where the process stands. Refund at the wrong moment and you can lose the money twice, once to your refund and once to the dispute.

Know when a proactive refund is the smarter move. Before a dispute is filed, a refund is sometimes the cheapest exit: the amount is small, the customer is furious, your evidence is thin. A $300 refund that prevents a dispute protects your ratio in a way that winning a $300 fight never will.

The pre-charge checklist

Ten checks before you charge any card. Screenshot this.

1. The name on the card matches the booker, or you documented the relationship in writing.
2. AVS and CVV checks passed.
3. 3D Secure was used on the card-not-present payment.
4. You collected a matching photo ID on bookings above your threshold (for example, $2,000).
5. You hold written authorization for the exact amount, timestamped.
6. The customer actively accepted your cancellation and refund policy, and it is on record.
7. Your billing descriptor shows a name the customer will recognize.
8. The itinerary and confirmation were sent and logged.
9. You checked the red flags, and verified more where one appeared.
10. Everything above is saved in one evidence folder for the booking.

Run this list on every booking and disputes stop being a threat to the business. They become paperwork you already did.

Aloha builds this protection into every transaction, so you can accept cards from travelers across the Americas and charge with confidence.