Mastercard GMAP: Is a VAMP-Style Program Coming?
Is Mastercard launching GMAP, a VAMP-style program that merges fraud and dispute monitoring? Here is what is confirmed for 2026, what is only rumored, and what subscription merchants should actually prepare for.
Here is the short version. Mastercard has not officially launched a program called GMAP that combines fraud monitoring and dispute monitoring into one score. That idea is a rumor. What is confirmed for 2026 is different, and already in force: the Scam Merchant Monitoring Program (SMMP) and updated Merchant Monitoring Program (MMP) onboarding rules. This post separates what is real from what is speculation, so you prepare for the right thing.
Mastercard GMAP: what is confirmed vs rumored
The question comes from a real change on the Visa side. In 2025 Visa merged its fraud monitoring and dispute monitoring into one program, the Visa Acquirer Monitoring Program (VAMP). VAMP is Visa's. Naturally, people ask whether Mastercard will copy the move, and some in the industry have started calling a rumored Mastercard version "GMAP."
The honest status, as of July 2026: Mastercard has not published a bulletin, an effective date, or any thresholds for a program like that. Even the write-up that describes it, from Chargeblast, says the specifics are early and unconfirmed. So treat "Mastercard GMAP" as a watch item, not a compliance deadline.
| Program | Status | What we know |
|---|---|---|
| SMMP (Scam Merchant Monitoring) | Confirmed | Live July 24, 2026. Acquirers must investigate flagged card-not-present merchants within 72 hours. |
| MMP onboarding scan | Confirmed | In effect since January 1, 2026. New merchants get scanned before their first transaction. |
| "GMAP" fraud + dispute merge | Rumored | No Mastercard announcement. Reported timing around 2027. Thresholds unconfirmed. |
| "Mastercard VAMP" | Does not exist | VAMP is a Visa program. Mastercard runs its own separate programs. |
Confirmed items are reported consistently across payments-industry sources. The rumored item traces to a single, self-described unconfirmed post.
There are two different "GMAPs"
This is where the confusion starts. "GMAP" already refers to an older, unrelated Mastercard program: the Global Merchant Audit Program. It is tied to legacy chargeback reason code 4849, "Questionable Merchant Activity". It flags merchants suspected of fraud and can end in termination. It has been around for years and has nothing to do with a Visa-style consolidation.
What is actually confirmed for 2026
The headline change for card-not-present and subscription merchants is SMMP. It went live July 24, 2026, and requires acquirers to investigate a flagged merchant within 72 hours. For newer merchants it counts refunds and chargebacks together, not chargebacks alone. We break down the triggers, the 5% threshold, and who it applies to in our Mastercard Scam Merchant Monitoring Program guide.
The second confirmed change is the updated MMP. Since January 1, 2026, merchants onboarded after that date must pass an initial content and transaction-laundering scan before they can process their first transaction.
Here is the key contrast with Visa. Mastercard has not merged its programs. It still runs its Excessive Chargeback Program and its Excessive Fraud Merchant program separately, with SMMP layered on top as a scam-signal check. Visa is the network that consolidated. If you want the Visa side, start with our VAMP 2026 explainer and our guide to card scheme compliance.
What subscription merchants should do now
Do not wait for GMAP. The rules that can get a merchant terminated today are SMMP and the standing chargeback and fraud programs. Prepare for those, and keep the rumor on a watch list.
- Track your combined refund and chargeback rate per MID, not just chargebacks. For newer merchants, SMMP counts the two together.
- Watch new MIDs (under six months old) most closely. They face the strictest SMMP trigger.
- Keep authorization rates stable. A sudden drop is its own SMMP signal.
- Ask your acquirer directly whether Mastercard has issued any bulletin about merging fraud and dispute monitoring. That is the only way to confirm the rumor.
Is Mastercard launching a program called GMAP?
Not officially. As of July 2026, Mastercard has not announced a program named GMAP that merges fraud and dispute monitoring, and it has published no effective date or thresholds. The idea is industry speculation, not a confirmed rule.
Is GMAP the same as Visa's VAMP?
No. VAMP is a Visa program that combined Visa's fraud and dispute monitoring in 2025. "GMAP" is a rumored Mastercard equivalent that Mastercard has not confirmed. There is no official "Mastercard VAMP."
Is this the same as Mastercard's Global Merchant Audit Program?
No. The Global Merchant Audit Program, tied to reason code 4849, is an older and separate fraud-audit program. It shares the GMAP acronym with the rumored new one but is unrelated.
When would a Mastercard GMAP take effect?
Unconfirmed. Reporting points to a possible 2027 timeline, but Mastercard has not published an announcement or an effective date. Treat any date as unverified until an official bulletin appears.
What Mastercard changes are actually confirmed for 2026?
Two. SMMP (scam merchant monitoring) went live July 24, 2026, and the updated MMP onboarding scan has applied since January 1, 2026.