Skip to content
October 1, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • Technique
  • What a chargeback is and how it affects your business
  • Technique

What a chargeback is and how it affects your business

Do Son January 26, 2022 3 minutes read
tech-security

Image Source: DepositPhotos

Consumer requests for refunds on remote transactions are a growing problem in Europe for merchants. This article answers the most often asked questions on the basics of chargeback mitigation and talks about how to secure Ecommerce Fraud using Ethoca to help your business be safe and profitable.

What is a chargeback?

A chargeback is a process by which a cardholder disputes a card transaction in EUR, USD, or any other currency to request a refund after a payment they consider fraudulent or for which they believe they did not receive the product or service purchased. This means that a merchant should transfer money at their own expense, lose the product and pay all the fees.

Types of chargebacks

We can divide chargebacks into three categories:

Criminal fraud

Criminal fraud chargebacks occur when a fraudster makes an unauthorized credit card transaction. Merchants can reduce these chargebacks by implementing powerful anti-fraud systems, like the Ethoca solution integrated with Covery, that helps define a money fraud.

Seller’s error

A seller’s error chargeback occurs when a chargeback is caused by a mistake made by the seller, such as the delivery of the wrong product. However, even this situation leads to a money loss. While we may consider this case to be a fair one.

Friendly fraud

Refunds for friendly fraud involve customers who abuse the refund process by declaring valid transactions as fraudulent in order to get a refund. The payment system built based on the Ethoca network can also help to solve these problems.

How does a salesperson deal with this problem?

Here, we have three types of returns that negatively affect your business. And there’s a solution to that. Now there’s already a Secure Ecommerce from Fraud network that allows cardholders and merchants to collaborate and exchange information in real-time. It’s based on Ethoca, which works by transmitting vast amounts of data about merchants to consumers, i.e. cardholders.

This approach makes it possible to find an understanding of every problem and allows you to transfer money to cardholders to satisfy their claims before they create a full-scale chargeback dispute.

The entire network is built on a linked MaxPay Account and an open account on the Ethoca website, making it easy to work with the data. All you have to do to get started is to open an account for the Secure Ecommerce Fraud system by Ethoca or link a MaxPay Account that you already have. With these simple procedures, you’ll have access to the database and save yourself from extra expenses when dealing with chargebacks.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
  • CVE-2026-88771
    Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
  • CVE-2026-65660CVSS 8.8
    Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
    Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
  • CVE-2026-5430CVSS 10.0
    The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-71362CVSS 9.1
    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
    CISA KEV📅 Added to KEV: Sep 24, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-58155CVSS 9.2
    Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass. This issue affects...
    📅 Updated: Oct 1, 2026
  • CVE-2026-58154CVSS 9.2
    Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This...
    📅 Updated: Oct 1, 2026
  • CVE-2026-13043CVSS 9.3
    A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows...
    📅 Updated: Oct 1, 2026
  • CVE-2026-96658CVSS 9.9
    A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE)...
    📅 Updated: Oct 1, 2026
  • CVE-2026-96659CVSS 9.1
    A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause...
    📅 Updated: Oct 1, 2026
  • CVE-2026-13014CVSS 9.2
    A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code...
    📅 Updated: Oct 1, 2026
  • CVE-2026-94620CVSS 9.4
    Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to...
    📅 Updated: Oct 1, 2026
  • CVE-2026-95284CVSS 9.6
    Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to...
    📅 Updated: Oct 1, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.