Chargebacks at New York Restaurants: What to Do Before They Happen, for To-Go Orders and Dine-In Checks

Even popular restaurants get chargebacks. A to-go order that was picked up gets disputed as “I never ordered this.” A dine-in check is pulled back weeks later. You call the card company, and the money does not come back. It is a story New York restaurant owners tell often.

Calling does not work because you are calling the wrong party. This article explains how the process works and what a restaurant can do first, based on the pages of the payment companies themselves (Toast, Square and Stripe).

Why the money stays gone

A chargeback starts when a customer tells the bank that issued their card, “I do not accept this payment.” From that moment the sale is debited and stays gone until the case is decided (Stripe). On Toast, the amount is taken out of that day’s deposit two to four days after Toast receives the notice (Toast).

All a restaurant can do is submit evidence through its payment company. The bank that issued the customer’s card makes the decision, and the payment company cannot move it. Toast says it cannot contact the issuing bank or influence the outcome, Stripe says it helps with the case but the result is at the sole discretion of the cardholder’s bank, and Square says it cannot speed up the time the bank takes (Toast, Stripe, Square).

The first place restaurants lose is the deadline. On Toast it is 15 calendar days from the day Toast receives the notice from the issuer, and after that the case is decided for the cardholder automatically (Toast). On Stripe it is usually 7 to 21 days, depending on the card network, and Square’s guide describes seven days (Stripe, Square). Toast notes that notice emails can get lost in a crowded inbox. Financial contacts can be set in communication preferences, so the notice goes to someone who actually reads it.

And nothing can be added after you submit, according to both Toast and Square (Toast, Square). Everything has to be ready before you press submit. Then comes the wait. The bank can take up to 180 days according to Toast, up to 90 days according to Square, and two to three months according to Stripe, and the money stays out for all of it.

There are fees too. Toast charges $15 per chargeback notification, whether you dispute it or not, and whether you win or lose. Stripe says it does not return the fee for receiving a dispute (Toast, Stripe).

So how much comes back if you fight? In a survey sponsored by Mastercard and run by Datos Insights, US merchants won 54% of the chargebacks they chose to contest. That is self-reported by merchants. Issuing banks claim 75%, and the two numbers do not line up (Chargeback.io). What is certain is that if you submit no evidence, you always lose.

Dine-in checks

For dine-in, dipping the chip or tapping the card changes a lot. Square says that when a payment is taken by chip insert or tap, liability for fraud shifts back to the issuing bank, and it advises against keying in a card number when the cardholder and the card are both there (Square). Keyed payments invite chip liability disputes, and according to Toast, contesting one can cost up to $500 in card network fees (Toast).

The most common dine-in problem is the duplicate charge. Toast asks for itemized receipts for every transaction on that card, and without them the dispute is often denied. If a guest switches payment method partway through, void the original transaction, and if you notice a duplicate, refund it right away. Toast recommends both (Toast).

Another is the charge the customer does not recognize, which happens when the name on the statement is not the name the customer knows. Stripe says disputes often start because the cardholder does not recognize the description, and recommends a statement descriptor that uses your business name or website domain (Stripe, Stripe). If your statement shows a company name, ask your payment company what it shows today.

Square says a signature on the receipt is not required for in-store food and beverage sales. An itemized receipt with descriptions, quantities and prices, and your refund and cancellation policy, still count as evidence (Square).

To-go: orders placed online

An online order is a card-not-present transaction, and Square says this kind of dispute is hard to win (Square). The bank decides on the evidence you submit, so how well the pickup is recorded decides the outcome.

The first moves come when you take the order. Toast recommends collecting the billing ZIP code. At pickup it suggests having the guest pay again by chip, asking for ID that matches the name on the card, or having the guest show the card. On tips, a Mastercard card-not-present payment is protected only if the tip is 20% or less (Toast). If you use Stripe, you can also authorize a payment first and capture it at pickup. A customer cannot dispute an authorization that has not been captured, and you can capture up to 7 days after the authorization (Stripe). Ask your payment company whether your register and online ordering support this.

Then there is the record at pickup. For a pickup dispute, Square lists item descriptions, the pickup location, the date and time, and the customer’s signature, along with a timestamped QR code confirmation or ID verification, a statement that the customer was present and left with the order or consumed it, and the refund policy the customer accepted at purchase (Square). In other words, who picked up what, and when, has to be recorded in a form you can look at later. Paper or a tablet both work.

An “I did not place this order” claim calls for different material. Square lists login details, full name, billing address, phone number, email, device or IP information, earlier transactions on the same card, and communications about the order (Square). Capturing these on the ordering screen is the first move.

Regulars give you one more strong tool. Under Visa’s Compelling Evidence 3.0, two earlier transactions on the same card that were not disputed, made at least 120 days and no more than 365 days earlier, with data showing it is the same person, become strong evidence against a fraud claim (Visa, Stripe). The flip side is that it does not help with a first-time customer. The first order from a new customer is where a confirmation call or email and a thorough pickup record matter most.

For a small order, refunding first can cost less than fighting. For payments you suspect are fraud, Stripe says the best point to refund is on charges roughly at or below the dispute fee, and that refunding is not worthwhile on charges more than 35% above it. A fully refunded payment cannot be disputed, but a partially refunded one can still be disputed for the full amount (Stripe, Stripe). With a $15 fee, a $12 to-go order you suspect is fraud costs less to refund.

On American Express and Discover, an inquiry (a request for information) can arrive before a chargeback. Stripe says that leaving an inquiry unanswered can lead to a chargeback you are unlikely to win, so respond right away (Stripe).

Shipped e-commerce orders

An order arrives, and the customer says it did not. This is common. Square lists the tracking number and shipment history, a status of “Delivered,” a signature if one was requested, screenshots of your communications with the customer, and the order confirmation showing the items, the agreed delivery address and the estimated delivery date. The delivery address has to include the street, not just city and state, because documents with only city and state are not considered valid evidence. Screenshots of communications need the full phone number or email visible (Square).

Stripe says card issuers do not follow links, so submit a screenshot of the tracking page. A link to your refund and cancellation policy is not enough either. Show the full policy before the order and require agreement, because a checkbox with only a link may be rejected as evidence (Stripe).

To act first, Stripe lists shipping to an address that has passed postal code and street checks, delaying shipment by 24 to 48 hours, and 3D Secure (the issuing bank’s identity check). Note that 3D Secure protects against fraud claims, not against “not received” (Stripe).

Bank account (ACH) returns

Payments pulled from a bank account (ACH) can come back in a similar way. “Insufficient funds” (R01) and “account closed” (R02) can be returned within two banking days of the debit, while “unauthorized” (R10) can come back within 60 days (Column, Modern Treasury).

So if you hold a large order until two banking days have passed, insufficient-funds and closed-account returns show up before you ship. An unauthorized return can arrive until day 60. For businesses that collect by ACH, return rates have limits too: 0.5% for unauthorized returns, 3% for account data errors and 15% overall (Nacha).

Is there insurance?

Short answer: yes, but it does not reach the center of a restaurant’s problem.

Ordinary cyber insurance and business owner’s policies often do not pay chargebacks, according to insurance agencies. What they pay for is things like response costs after a card data breach, and payment industry fines (Prestige Insurance, Morrow). What is sold as “chargeback insurance” mainly pays fraud claims, and Stripe says policies may not cover disputes that come from customer dissatisfaction or processing errors (Stripe).

In practice, Stripe’s Chargeback Protection covers fraud disputes on card payments made through Stripe Checkout, and the fee is whatever Stripe communicates (Stripe). Shopify Protect covers eligible Shop Pay orders on Shopify Payments at no extra cost (Shopify), and a reply in the Shopify Community says it does not cover “item not received” or “not as described” disputes (Shopify Community).

So the customer claims themselves, such as “it never arrived” when it did, or “I never ordered” when they picked it up, are often not covered. It is worth asking your insurance agent whether your current policy has any coverage for chargebacks or payment card fraud, and asking your payment company whether it has anything that guarantees online order fraud.

Early alerts, and where to stop

An issuing bank sometimes reports suspected fraud to the card network first. According to Stripe, about 40% of these Visa and Mastercard early fraud warnings turn into fraud disputes (Stripe). There are also services that tell a merchant before a chargeback happens, so the merchant can refund and close the case, such as Visa’s Verifi and Mastercard’s Ethoca. According to explainer articles, they charge per alert (Chargeback.io). Restaurants rarely contract for these directly, so ask your payment company whether it offers them.

Restaurants with many online orders should also watch Visa’s monitoring program (VAMP). According to an industry explainer, the “excessive” threshold for merchants dropped from 2.2% to 1.5% in April 2026 (Justt). Explainers differ on the details of how it is counted, so check with your payment company.

Finally, a word on where to draw the line. Fighting takes effort and time. Toast says Mastercard 4808 (authorization), 4870 and 4871 are hard to win and generally not worth disputing (Toast). Refund the small ones early. For the large ones, assemble the evidence and submit before the deadline. Deciding that line once saves you from agonizing every time.

If you are choosing a platform for online orders, we compared options in 5 Recommended Platforms for Starting an E-Commerce Site in the U.S.. For card data theft aimed at checkout pages, see An Adobe Commerce and Magento Flaw Joins CISA’s Exploited List, and for recent trends in how e-commerce is built, Headless eCommerce Trends and Practical Examples Using Sanity. If you want to review what your online ordering screen collects at checkout, how it presents your refund policy, or the design of your confirmation email, please reach out through the EC development page or contact us.