Every $1 lost to a chargeback costs a merchant $5.13 all-in once you count the transaction reversal, fees, lost goods, and administrative overhead, according to the 2026 LexisNexis True Cost of Fraud study. Global chargebacks are projected to climb from $33.79B in 2025 to $41.69B by 2028, and friendly fraud — a customer disputing a legitimate charge rather than reporting genuine theft — now drives roughly 75% of all eCommerce disputes.
Why “Friendly Fraud” Is the Real Problem in 2026
First-party fraud (a customer disputing their own legitimate purchase, whether through confusion, buyer’s remorse, or deliberate abuse) is now the leading fraud type globally at 36% of all reported fraud, and forecasts point to a 40% rise in friendly fraud cases specifically. This matters because it’s largely unaddressed by traditional fraud-detection tools built to catch stolen card numbers — the card is real, the cardholder made the purchase, and the dispute happens anyway.
The Numbers
| Metric | 2026 Data |
|---|---|
| Cost per $1 lost to chargebacks (all-in) | $5.13 |
| Global chargebacks, 2025 vs. projected 2028 | $33.79B → $41.69B (23% rise) |
| Friendly fraud share of all eCommerce disputes | ~75% |
| First-party fraud share of all reported fraud | 36% (leading category) |
| Forecast rise in friendly fraud cases by 2026 | 40% |
Where Fraud Is Actually Heading
Beyond friendly fraud, 2026 fraud trend reporting points to a shift toward identity-based schemes — account creation fraud and account takeover specifically — alongside more automated attack tooling: agentic AI, emotionally intelligent fraud bots, and website cloning are all named as emerging threat categories rather than theoretical ones. The common thread is automation: fraud attempts increasingly scale the way legitimate traffic does, which changes what “enough” fraud protection looks like.
What Actually Helps
- Document everything at the point of sale — IP address, device fingerprint, delivery confirmation, and clear terms shown at checkout give you the evidence needed to fight a friendly-fraud dispute rather than automatically losing it.
- Use 3D Secure / strong customer authentication where your payment gateway supports it — it shifts liability for certain fraud types away from the merchant and adds a real verification step against account-takeover attempts specifically.
- Watch for account-creation patterns, not just individual transactions — a cluster of new accounts with similar behavior is a stronger fraud signal than any single order looked at in isolation.
- Respond to disputes promptly and with real evidence — given friendly fraud’s dominance, a well-documented response genuinely changes outcomes rather than being a formality.
This pairs with the broader checkout security picture covered in WooCommerce Guest Checkout: The Conversion Fix Most Stores Still Skip. Want your store’s fraud and chargeback exposure reviewed? Get in touch.
Frequently Asked Questions
Is friendly fraud actually fraud, or just customer disputes?
It’s classified as first-party fraud in industry reporting — a real customer disputing a legitimate charge, whether through genuine confusion or deliberate abuse — and it’s treated as a fraud category because of its scale and financial impact on merchants, regardless of intent.
Can WooCommerce’s native tools handle this on their own?
Native WooCommerce doesn’t include dedicated fraud-detection or dispute-evidence tooling out of the box — this typically requires a payment gateway with built-in fraud tools or a dedicated fraud-prevention plugin/service layered on top.
What’s the single most effective response to friendly fraud specifically?
Strong documentation at the point of sale — IP address, device data, delivery confirmation, and clear checkout terms — since friendly-fraud disputes are largely won or lost on the strength of the evidence a merchant can present.
Featured image: original illustration.