If you haven't reviewed your merchant statements since January 2025, you're likely paying more than you realize. Mastercard rolled out four distinct waves of fee changes across 2025-2026, affecting everything from retry logic to B2B commerce—and most merchants didn't notice until the costs appeared on their statements.
At Verisave, we've analyzed hundreds of statements since these changes took effect. Here's what actually happened, what it costs, and what you should do about it.
The Complete Timeline: What Changed and When
January 2025: Excessive Authorization Penalties Increased
What Changed: TPE (Transaction Processing Excellence) Excessive Authorization Attempts Fee jumped from $0.30 to $0.50 per declined authorization.
When It Applies: After 10 declined attempts in 24 hours OR 35 attempts in a 30-day rolling period.
Who's Affected Most:
- Subscription/SaaS platforms with recurring billing
- E-commerce sites with high cart abandonment
- Merchants with outdated card-on-file systems
Real Cost Example: A $100k/month SaaS platform processing 500 subscription renewals monthly might see 15-20 excessive authorization events. At $0.50 each, that's $90-$120 monthly in pure penalties—before processing fees.
What This Signals: Mastercard is pushing merchants toward better payment processor integrations and Account Updater services to reduce credit card processing fees.
April 2025: Two Major Changes
1. Acquirer Credential Continuity Fee Tripled
What Changed: Fee increased from $0.03 to $0.09 per recurring payment transaction with outdated credentials (effective April 1, 2025).
Impact: If you process 1,000 recurring payments monthly with outdated card data, your monthly penalty increased from $30 to $90—a $720 annual increase for mid-sized merchants.
Solution: Implement card-on-file credential updating through your processor's Account Updater program.
2. MastercardFlex Program (MFP) Launched
What's New: A global commercial credit program for B2B non-travel flows with flexible interchange structure.
Key Details:
- 0.10% participation fee on qualified transactions
- Designed for large-ticket B2B commerce
- Alternative to traditional Level 2/3 programs
- Requires specific data elements (similar to Visa CEDP)
Opportunity: For B2B merchants processing $500k+ monthly in corporate cards, MastercardFlex can deliver 15-25% savings on commercial interchange fees if implemented correctly.
Referenced in: Mastercard's official 2025-2026 merchant rates document. For a complete breakdown of how these fees work, see Mastercard's interchange rate explanation.
October 2025: Operational Rules Tightened
1. Digital Enablement Maximum Fee Eliminated
What Changed: Fee remains 0.02% with $0.02 minimum, but the maximum cap was removed (effective October 1, 2025).
Impact: For high-ticket transactions (over $1,000), digital enablement fees now scale without limit. A $50,000 B2B transaction now incurs $10 in digital enablement fees instead of the previous capped amount.
2. Refund Authorization Requirement
What Changed: All refund transactions must be submitted for authorization before processing (effective October 1, 2025).
Exceptions: Airlines (MCCs 3000-3350, 4511), Railways (MCC 4112), Contactless Aggregated Transit.
Why It Matters: Merchants who batch-process refunds without individual authorization now face downgrade fees or transaction rejections.
January 2026: Data Integrity Penalties Escalated
What Changed: Undefined Authorization Not Allowed Fee increased to 0.30% with $0.05 minimum (effective January 1, 2026).
When It Applies: When authorization requests contain undefined or invalid data elements.
Cost Impact: A $1,000 transaction with invalid authorization data now costs $3.00 in penalties ($0.30% of $1,000). For merchants processing $1M monthly with 5% invalid auth data, that's $1,500 monthly in avoidable fees.
Also Changed (January 2026): MOTO (Mail/Telephone Order) fees now charge on all authorizations (including declines), not just cleared transactions. For MOTO transactions over $500, Mastercard introduced a $75 fee cap on declined transactions.
Comparison: Mastercard vs. Visa 2025-2026 Changes
| Change Type | Mastercard | Visa |
|---|---|---|
| Excessive Authorization | $0.50 per event (Jan 2025) | Retry logic penalties via VAMP |
| Outdated Credentials | $0.09 per transaction (Apr 2025) | Account Updater requirements |
| B2B Program | MastercardFlex 0.10% fee (Apr 2025) | CEDP 0.05% participation fee (Apr 2025) |
| Data Quality | Undefined Auth 0.30% + $0.05 (Jan 2026) | CEDP AI validation (Oct 2025) |
| Level 2 Retirement | N/A (maintains programs) | Retired early 2026 (earlier than announced April 2026) |
Key Difference: Visa's CEDP uses AI validation to enforce data quality, while Mastercard uses escalating penalty fees for operational failures. Note: Visa retired Level 2 earlier than the originally announced April 2026 deadline, eliminating the mid-tier data standard for B2B merchants.
Merchant Impact by Category
Recurring Billing (SaaS, Subscriptions, Nonprofits)
Highest Impact: Credential Continuity ($0.09) + Excessive Authorization ($0.50)
Action Items:
- Implement Account Updater (reduces outdated credential failures by 40-60%)
- Review retry logic to avoid excessive authorization penalties
- Monitor dunning processes for soft vs. hard declines
B2B Platforms & Wholesale
Highest Impact: MastercardFlex opportunity + Digital Enablement fees
Action Items:
- Evaluate MastercardFlex eligibility for commercial volume over $500k/month
- Budget for uncapped digital enablement fees on large transactions
- Implement Level 3 data capture to qualify for lower rates
- For Visa volume: Note that Level 2 has been retired—migrate to Product 3 (Level 3) data standards to maintain favorable rates
E-Commerce & Retail
Highest Impact: Refund authorization requirement + Undefined authorization penalties
Action Items:
- Update refund processes to submit authorization before settlement
- Validate all authorization request data fields (card type, transaction type, MCC alignment)
- Review merchant statements for new undefined authorization fees
MOTO & Call Centers
Highest Impact: MOTO fee on declined authorizations (Jan 2026)
Action Items:
- Implement address verification (AVS) to reduce declines
- Train staff on card data validation before authorization submission
- Budget for $75 fee cap on declined MOTO transactions over $500
How to Audit Your Statements for These Changes
Most merchants don't notice these fees until they appear as line items. Here's how to find them:
Look for these fee descriptions:
- "Mastercard TPE Excessive Authorization" ($0.50)
- "Acquirer Credential Continuity" ($0.09)
- "MastercardFlex Program Fee" (0.10%)
- "Digital Enablement Fee" (0.02% uncapped)
- "Refund Authorization Violation"
- "Undefined Authorization Not Allowed" (0.30% + $0.05)
- "MOTO Declined Auth Fee" ($75 max on $500+ transactions)
Red Flags:
- Sudden increase in authorization attempt counts
- New "credential continuity" line items starting April 2025
- Digital enablement fees exceeding previous amounts
- Any "undefined" or "not allowed" authorization fees
Optimization Strategies: Working Within the System
At Verisave, our approach is "optimization without disruption"—you don't need to switch processors to address these changes.
Immediate Actions (This Quarter)
- Enable Account Updater through your existing processor
- Review retry logic to prevent excessive authorization penalties
- Implement refund authorization in your workflow (if not already done)
- Audit authorization data to eliminate undefined/invalid fields
Strategic Planning (Next 6 Months)
- Evaluate MastercardFlex if you process $500k+ monthly in B2B
- Optimize digital enablement for high-ticket transactions
- Review MOTO processes to minimize declined authorizations
- Compare to Visa CEDP to determine which network offers better B2B rates (note: Visa Level 2 no longer available)
Long-Term Positioning (2026+)
With both Visa and Mastercard tightening data quality requirements, the merchants who will thrive are those who:
- Capture complete transaction data at the point of sale
- Maintain updated card-on-file credentials
- Integrate with processor optimization services
- Monitor statements monthly for new fee types
The $38 Billion Settlement: What's Coming
In November 2025, Visa and Mastercard reached a revised $38 billion settlement that includes:
- 0.10% interchange reduction for 5 years (pending court approval)
- Rate caps on consumer credit cards at 1.25% for 8 years
- Expanded surcharge ability for merchants
Timeline: Court approval expected early 2026. If approved, merchants could see slight rate relief starting mid-2026—but don't count on it offsetting the 2025 fee increases.
Atomic Answer: What should I do right now?
Audit your March 2026 statement for these specific line items:
- TPE Excessive Authorization ($0.50)
- Acquirer Credential Continuity ($0.09)
- Undefined Authorization Not Allowed (0.30% + $0.05)
- MOTO Declined Auth Fee ($75 cap)
If you see any of these, implement Account Updater and review your authorization data validation. For B2B merchants processing $500k+ monthly, evaluate MastercardFlex eligibility. For Visa B2B volume, note that Level 2 has been retired—ensure you're meeting Product 3 (Level 3) data standards to maintain favorable rates.
Need Help Decoding Your Statement?
If you're not sure what these changes mean for your specific business, Verisave specializes in statement analysis and optimization without requiring processor switches. We've helped hundreds of merchants navigate the 2025-2026 fee increases and identify savings opportunities within their existing setup.
Schedule a free statement analysis to see exactly where these fees are affecting your bottom line.
