Chargebacks and Card Fraud: A Guide for Travel Agencies

Travel agencies get more chargebacks than most online shops, and for two reasons. Stolen cards are used to buy trips that can be resold or used quickly, and travel is paid long before it happens, so a customer can dispute a payment months later. You protect your agency in three ways: stop fraud at checkout, keep the records that win a dispute, and answer every dispute on time.

This guide explains how card disputes work, which ones 3D Secure covers and which it does not, the warning signs of a fraudulent booking, and what evidence to send when a customer's bank takes a payment back. The dispute rules below are taken from Stripe's documentation, read on 10 November 2026. Other gateways follow the same card network rules, with their own fees and screens.

What a chargeback is

A chargeback happens when a cardholder asks their bank to reverse a payment. The bank takes the money back from your account while it looks into the claim, and your gateway charges you a dispute fee. On Stripe the fee for receiving a dispute is not refunded, even if you win, except for businesses in Mexico. If you contest the dispute, a second fee applies, and Stripe returns that one if you win.

Disputes fall into two broad groups. Fraud disputes say "I did not make this payment". Service disputes say the customer paid but did not get what they paid for, or cancelled and was not refunded. You defend the two very differently.

Why travel is different: the dispute window

Card networks usually let cardholders dispute a payment within 120 days. For travel, that clock often starts later. Stripe's documentation says that when a customer pays for a future service such as a holiday reservation, the dispute window generally starts on the date of the trip, not the payment date.

So an Umrah package paid in January for a March departure can still be disputed in the summer. Keep every booking record at least until well after the trip has ended, and do not count money as safe just because the payment cleared.

What 3D Secure covers, and what it does not

3D Secure is the step where the customer's bank asks them to confirm a card payment, often with a code or a banking app. When a payment passes 3D Secure and is later disputed as fraud, the liability for that fraud usually shifts from you to the card's bank. Stripe is careful to say this shift is expected for eligible fraud disputes but is not guaranteed for any single payment.

Two limits matter for agencies. If the card does not support 3D Secure, or authentication fails with an error and the payment goes ahead anyway, there is generally no liability shift. And 3D Secure does nothing for service disputes. If a customer says the hotel was not as booked, or they cancelled and wanted their money back, the normal dispute process applies and your evidence decides the outcome.

Turn 3D Secure on for every card payment if your gateway allows it. On Travora Hub, card payments through Stripe use 3D Secure on every booking.

Warning signs of a fraudulent booking

None of these proves fraud on its own. Several together are a reason to call the customer before you issue tickets or confirm a non-refundable hotel.

• A high-value booking for travel within the next day or two, especially one-way flights.
• The cardholder's name has nothing in common with any traveller's name.
• Several cards tried in a row before one goes through.
• The card's country, the customer's location and the destination have no obvious link.
• Pressure to confirm fast, or a request to change traveller names right after payment.
• A brand new customer whose phone number does not answer.

A short phone call catches most of these. Genuine customers rarely mind a call that confirms their booking.

Early fraud warnings

Sometimes the card's bank flags a payment as likely fraud before any dispute arrives. Stripe calls these early fraud warnings and says about 40% of them on Visa and Mastercard turn into fraud disputes if the payment is not refunded. For a small payment, refunding straight away can cost less than the dispute fee. For a large booking, check with the customer first.

Some networks, mainly American Express and Discover, also send an inquiry before a formal dispute, asking you to explain the payment. Always answer these. Stripe warns that an unanswered inquiry can become a chargeback you can no longer win.

Evidence that wins travel disputes

Collect these for every booking, so you have them ready when a dispute arrives:

• The booking confirmation and the supplier's reference number.
• The hotel voucher or e-ticket you sent, with the date and the email address it went to.
• The cancellation policy exactly as the customer saw it at checkout, and proof they accepted it.
• Proof the service was used: a hotel check-in confirmation from the supplier, or flight usage where the airline can confirm it.
• Your messages with the customer, including WhatsApp chats.
• The 3D Secure result and the customer's IP address at payment, for fraud disputes.

The cancellation policy is the item agencies most often cannot produce. Show it clearly before payment, keep a copy with the booking, and put it on the voucher as well.

How to answer a dispute

1. Read the reason code. A fraud claim and a "service not provided" claim need different evidence.
2. Check the deadline. You usually have 7 to 21 days to respond, depending on the card network.
3. Decide whether to accept. If the customer is right, for example a refund you promised and forgot, accepting saves the second fee and your time.
4. Send short, clear evidence that answers the claim directly. A one-page summary on top helps the bank's reviewer.
5. Wait. The card's bank usually decides within 60 to 75 days, and the whole process can take two to three months.

Policies that prevent disputes

Many travel disputes start as unanswered questions. A customer who cannot reach you calls their bank instead. Reply quickly on the channel customers use, which for most agencies is WhatsApp.

Refund promptly when a supplier cancels or a booking fails. On Travora Hub, if a supplier booking fails after the customer has paid, the payment is refunded automatically, so the customer does not have to chase you or their bank.

Make your business name easy to recognise on card statements. A customer who does not recognise a charge may dispute it as fraud.

Keep your dispute rate low. Card networks put businesses with high dispute rates into monitoring programmes, and Stripe notes that in those cases even 3D Secure payments may not get the liability shift.

Frequently asked questions

How long can a customer dispute a travel booking?

Usually 120 days, and for future travel the period often starts on the travel date instead of the payment date, so disputes can arrive months after payment.

Does 3D Secure stop all chargebacks?

No. It usually shifts liability for fraud disputes on successfully authenticated payments, though even that is not guaranteed. It does not cover disputes about the service itself, such as cancellations or a hotel that was not as described.

Should I refund a payment flagged as possible fraud?

For small payments, refunding can cost less than a dispute fee. For large bookings, contact the customer first, and never issue tickets or confirm non-refundable rates while you are unsure.

Which payment gateway is best for a travel agency?

That depends on your country and customers. Our guide to payment gateways for travel agencies compares Stripe, MyFatoorah and Safepay, and the payment gateways page shows what each Travora Hub plan supports.

For how the platform itself protects card data and bookings, see travel booking software security, or try a booking in the live demo to see the checkout and 3D Secure step.