Skip to content

Why the Next 6 Months Will Redefine Merchant Risk Management

Two deadlines. One turning point.

On October 1, 2025, enforcement begins on the Visa Acquirer Monitoring Program (VAMP). Just three months later, on January 1, 2026, Mastercard’s Merchant Monitoring Program (MMP) revised standards take effect.

Together, these updates mark one of the most significant shifts in payments compliance in years — and the next six months will determine whether acquirers, payment facilitators, and ISOs get ahead of the curve or risk being left behind.

Woman hand holding credit cards and using smartphone for shopping online with payment on internet banking.

September 3, 2025 | by LegitScript Folks

Four Things You Need to Know About VAMP and MMP

  1. Detection needs to happen sooner. Both the MMP and VAMP raise the bar on acquirer responsibility by pushing risk detection earlier in the merchant lifecycle and requiring more proactive oversight.

  2. Monitoring has to go deeper. Surface-level checks aren’t enough. Networks expect continuous oversight, including restricted or password-protected merchant content.

  3. Accountability is rising. Regulators and card networks are putting more pressure on acquirers to ensure merchants remain compliant throughout their lifecycle.

  4. Enforcement is real. Networks are raising the stakes. Those who lag face fraud exposure, card network penalties, and reputational harm.

How LegitScript Helps You Comply With VAMP and MMP

LegitScript is already aligned with what Visa and Mastercard require:

  • Pre-transaction scans: Our Merchant Onboarding solution conducts the rapid, automated checks needed to stop fraud and high-risk activity before a merchant goes live.

  • Continuous, lifecycle monitoring: Our Merchant Monitoring solution provides persistent oversight, with visibility into restricted content and evolving merchant risks.

  • AI + human-in-the-loop: Automated scans catch scale issues; expert review uncovers risks technology-only solutions can miss.

  • Proven experience: Nearly 20 years guiding the world’s leading payments companies through BRAM, MATCH, and evolving card network rules.

In short: We’re not scrambling to meet the new requirements — we’ve already built them.

Why Act Now

The three months between October 1 and January 1 are critical. Payments companies that wait until enforcement kicks in will face unnecessary risk and disruption. By partnering with LegitScript today, you’ll:

  • Get ahead of enforcement before regulators and networks start knocking.

  • Build trust with stakeholders by demonstrating proactive compliance.

  • Strengthen your risk management strategy with a partner that’s proven and network-approved.

The Bottom Line

Visa and Mastercard have made their expectations clear: proactive, lifecycle compliance is the new standard. The time to act is now — and LegitScript is the safe, strategic choice to help you meet these new requirements with confidence.

Learn more about LegitScript’s Merchant Onboarding and Merchant Monitoring solutions.

Recent Blog Articles

Industry Experts Talked About These Three Key Issues at the Marketplace Risk Global Summit

The Marketplace Risk Global Summit, which took place this month in London, provided a space for the experts, founders, and industry leaders of online platforms to share their experiences, strategies, and forward-thinking solutions to the most pressing challenges in risk management, trust & safet...

FTC Payments Enforcement Trends: Key Takeaways for Payment Service Providers

The Federal Trade Commission continues to scrutinize the payments ecosystem, viewing these companies as critical gatekeepers in the fight against consumer fraud. LegitScript's recent webinar, FTC Payments Enforcement Trends: What Merchant Acquirers and Payment Service Providers Need to Know, examine...

Navigating AI’s Gray Areas: Why Human Oversight Still Matters

Artificial intelligence is changing the way organizations identify risk, monitor compliance, and make policy decisions. But as the technology evolves, so does the challenge of knowing where its limits lie. During a recent panel at Marketplace Risk NYC, Tom Cook, Chief Product and Technology Officer,...

LegitScript Marketplace Risk NYC Panel Recap: AI Blind Spots: The Gray Areas of Risk, Policy & Regulation

AI agents are transforming workflow automation, bringing speed, scale, and intelligence to complex processes. Think of them as well-read interns: capable but inexperienced, requiring context and human judgment. As their role expands, how do we ensure automation enhances, rather than replaces, though...