SAFE
What is SAFE?
SAFE (System to Avoid Fraud Effectively) is Mastercard's fraud reporting system, which collects confirmed fraud data from and passes it to acquirers and merchants. It records fraud after the fact rather than blocking it, so a SAFE entry is created once a fraud claim has already been confirmed.
SAFE gives merchants detailed information and notifications about fraud claims raised against their transactions. While it doesn't directly prevent or , it shows the nature and circumstances of the claims cardholders made, and Mastercard measures a merchant's fraud levels against its monitoring programs using the same data.
Key facts
- Also known as: System to Avoid Fraud Effectively, Mastercard fraud reporting
- Operated by: Mastercard. Visa's equivalent feed is .
- Reported by: the issuer, after a cardholder confirms a transaction was fraudulent
- Data points recorded: type of fraud, transaction amount, date and time of the transaction, and merchant and card details tied to the transaction
- Relationship to disputes: independent. A SAFE record can exist with no chargeback attached, and a chargeback can be filed with no SAFE record behind it.
How it works
- A cardholder reports fraud. The cardholder contacts the issuer and states that a Mastercard transaction on the account was unauthorized.
- The issuer confirms and codes the claim. The issuer classifies what happened – lost or stolen card, card-not-present fraud, account takeover – and that classification travels with the record.
- The issuer submits the record to SAFE. Submission runs on a recurring reporting cycle rather than at the moment the cardholder calls, which is why SAFE data reaches merchants later than the transaction itself.
- Mastercard aggregates the data. Records are grouped by merchant, , region, and fraud type, producing a fraud profile for each merchant across all its Mastercard volume.
- The acquirer and merchant receive the output. The data reaches merchants as through their acquirer, and the same aggregates feed Mastercard's fraud monitoring programs.
SAFE vs TC40
SAFE and carry the same kind of data on different card networks, so a merchant accepting both brands appears in both feeds under separate reporting.
| SAFE | TC40 | |
| Card network | Mastercard | Visa |
| Reported by | Issuer | Issuer |
| What it records | Confirmed fraud on Mastercard transactions | Confirmed fraud on Visa transactions |
| Feeds into | Mastercard fraud monitoring programs | Visa monitoring, including |
Neither feed moves money. A reaches the merchant as a chargeback carrying a and a debit to the account, while a SAFE record arrives as a fraud notification with no financial adjustment attached.
Why it matters
- Fraud reported through SAFE counts toward Mastercard's fraud monitoring programs, which track fraud volume separately from the , so a merchant can breach a fraud limit while its own chargeback reporting still looks clean.
- SAFE surfaces fraud a merchant would otherwise never learn about. When an issuer writes off a small fraudulent charge instead of raising a dispute, the transaction still lands in the report.
- The fraud-type coding separates attack patterns. Records flagged as card-not-present fraud point to stolen card data in circulation, while claims that trace back to the legitimate cardholder are rather than a security failure.
