What is Mastercard GMAP?
The Global Merchant Audit Program takes effect on April 1, 2027. It replaces ACMP and merges Mastercard’s fraud and dispute monitoring into one combined framework, much like Visa’s VAMP. The existing EFM, ECM and HECM categories carry over, and four new ones are added: High and Excessive Dispute Merchant (HDM, EDM) and High and Excessive Dispute Acquirer (HDA, EDA).
The practical effect is that a clean chargeback ratio no longer protects you if your fraud rate is high, and the other way round. Fraud counts even if it never led to a chargeback, because Mastercard’s SAFE system is now the Fraud and Loss Database (FLD). Monitoring also moves to the sub-merchant ID where one exists, so a single sub-merchant breach can put the whole MID portfolio at risk.
How the ratios are calculated


1 bps = 0.01%, so multiplying the plain ratio by 100 gives a percentage and by 10,000 gives bps. The calculator above shows both ratios in bps.
How Does GMAP Monitoring Work?
GMAP uses transaction, fraud, and dispute data to assess merchant and acquirer risk. Different monitoring categories have their own criteria, including ratio thresholds and minimum activity requirements.
Why Should Businesses Prepare for GMAP?
As monitoring requirements evolve, businesses may face greater scrutiny of their fraud and dispute performance.
Tracking your metrics early can help identify potential issues and support more informed payment decisions.
| Tier | Ratio | Minimum volume | Consequence |
|---|---|---|---|
| HDA (acquirer) | 0.5% | 1,500+ transactions | Escalating acquirer fines |
| EDA (acquirer) | 0.7% | 1,500+ transactions | Up to $100,000/month |
| HDM (merchant) | 5% | 5+ cases and $5,000+ | $0 months 1–6, then $5k–$25k/month |
| EDM (merchant) | 50% | 5+ cases and $10,000+ | $5k, $25k, then $100k–$300k/month |
After two months in HDM, issuers may be alerted. After two months in EDM, you become liable for fraud chargebacks from 3 months before and 6 months after identification. Exit requires three consecutive months below the threshold.