Subscription Payment Processing: How Rebills, Trials and Disputes Work
The rebill cycle as an acquirer reads it: how plain subscriptions, trials and continuity plans are classified, which scheme limits apply and which numbers set your terms.
- By the OpenGate underwriting desk
- Updated
- 16 min read
Subscription payment processing is the handling of recurring card charges that a merchant initiates on a schedule, using card details and consent captured once at signup. Each later charge, called a rebill, runs without the customer present, which is why acquirers judge a subscription file on its signup terms, its first-rebill dispute rate and its cancellation path. This guide follows the rebill cycle the way an underwriter reads it, from trial to dispute.
In this guide
How subscription payment processing works, from signup to rebill
A subscription runs on two kinds of transaction: one payment the customer starts, then a series the merchant starts. The card schemes treat the two differently, and most processing problems begin where a billing system blurs them. Software businesses face extra layers, such as tax and trials, covered in SaaS payment gateway.
- Signup. The customer enters card details and accepts the terms. This is the cardholder-initiated transaction, even when the amount is zero for a free trial. Where strong customer authentication applies, this is the payment that carries the 3DS2 check, as the 3DS2 and SCA guide explains.
- Storage. The gateway replaces the card number with a token and keeps the number in its vault. Your billing system holds the token.
- The rebill. On each billing date your system sends a merchant-initiated transaction flagged as recurring. Mastercard’s rules have the acquirer mark the signup as cardholder-initiated and each later charge as a merchant-initiated subscription payment. For rebills sent on or after 23 October 2026, the same rules add one field: the transaction link identifier that Mastercard returned with the signup payment, or with the most recent rebill when the original is unavailable. Your gateway or billing system has to keep that value for the life of the subscription.
- The issuer’s answer. The cardholder’s bank approves or declines. A decline comes back with a response code, and that code decides whether you may try again.
- Recovery. A declined rebill enters your retry schedule and your payment-update emails, or the subscription pauses.
- Settlement. Approved rebills settle on the schedule written in your offer, less the reserve.
- The end. When the customer cancels, your permission to charge the card ends. Visa’s guidance to merchants states that you may not bill the account once a cancellation request has been received.
Every step after the first leans on the signup. The terms shown on that screen, the consent record and the confirmation email are the evidence behind each rebill that follows, sometimes years later.
Why acquirers price a subscription differently from a one-time sale
The acquirer carries the chargeback risk on every rebill, and a rebill is the charge a customer is most likely to have forgotten. Mastercard states in its summary of the subscription standards that recurring transactions are more likely to result in chargebacks than non-recurring ones. The exposure also repeats: a one-time sale opens one dispute window, and a subscriber opens a new one at each billing cycle.
Three features of the model move the price. The first is how the customer entered, because a paid first order behaves better than a free trial that converts by default. The second is what you deliver: a physical auto-ship adds delivery and return disputes to the billing ones. The third is how the customer leaves, because every obstacle on the way out sends a share of would-be cancellations to the bank instead.
That reading sets the terms of a subscription merchant account: the rate, the monthly cap and the reserve. The reserve works as it does in any other vertical, and the reserve math is in the rolling reserve guide. What is specific to subscriptions is the set of numbers that feed it.
Four billing models and how each one is classified
The schemes and the acquirer classify the offer, whatever the product. A meal kit, a streaming service and a supplement auto-ship can share a model or sit in three different ones.
| Model | How the customer enters | How the schemes treat it | What the underwriter reads first |
|---|---|---|---|
| Plain subscription | Pays the full price on day one, then renews | Standard recurring requirements: terms at checkout, confirmation, online cancellation | Refund rate and cancellations by cycle |
| Trial of a digital product or service | Pays nothing or a token amount, then converts to the full price | Negative option requirements: a dated reminder before the trial ends, trial terms on the payment page | Trial-to-paid conversion and the dispute rate on the first full charge |
| Trial of a physical product with auto-ship (continuity) | Pays shipping or a sample price, then receives and pays for full-size shipments | Mastercard registration, MCC 5968, fresh consent before the first full-price charge | The same two numbers, plus returns and the post-trial consent record |
| Annual or other infrequent renewal | Pays once, renews 6 to 12 months later | A renewal reminder before each charge under Mastercard’s rules | Dispute rate on renewals and proof the reminder went out |
One business can run several models at once, and Mastercard applies its trial requirements offer by offer. Declare each offer in the application. An underwriter who finds a trial funnel the file did not mention reads the rest of it with suspicion. Every offer that converts by default falls under the rules for negative option billing: scheme requirements on disclosure, reminders and cancellation, with US federal and state law behind them. In the UK, subscriptions taken out from January 2027 fall under new statutory duties, listed with the UK rules for high-risk merchants. France requires online cancellation and a reminder before a tacit renewal, Québec a cancellation button, and Belgium free cancellation after the first renewal, as the France, Canada and Belgium pages explain. Switzerland, by contrast, has no statutory rule on tacit renewal (Switzerland page), and in Hong Kong a hidden renewal can be a misleading omission under the Trade Descriptions Ordinance (Hong Kong page). Australia adds subscription duties from July 1, 2027 (Australia page), Singapore requires a reminder before a free trial turns paid (Singapore page), and EU law requires an online withdrawal function from June 19, 2026 (Europe page). Ireland labels that function “cancel contract here”, and in Portugal a refund paid late after a withdrawal is owed twice. Spain asks for a reminder 15 days before a fixed-term contract renews, Italy for notice 30 days before the term ends and Mexico for five days’ notice of an automatic renewal; the Netherlands caps a consumer subscription’s fixed term at one year, and in Israel charging must stop within three business days of a cancellation notice.
What MCC 5968 changes for a continuity merchant
MCC 5968 is the merchant category code for continuity and subscription direct marketing, and it tells issuers and schemes that your charges come from a recurring program. Visa names it Direct Marketing: Continuity/Subscription Merchant, and Mastercard’s title is nearly identical. The acquirer assigns the code. You do not pick it.
The code brings a registration duty. Under section 9.4.10 of Mastercard’s Security Rules and Procedures, an acquirer must register a merchant with Mastercard before it processes card-not-present negative option billing for physical products, magazine and newspaper subscriptions included, and it must identify those transactions with MCC 5968. At the time of registration the acquirer must have verified that the merchant’s activity complies with the laws that apply to it, and Mastercard bills the acquirer a registration fee for each registered merchant every year. That duty is why a continuity file gets a deeper checkout review than the same product sold one order at a time.
Two consequences follow. First, the code does not switch the subscription rules on or off: Mastercard’s FAQ for merchants states that its subscription and trial requirements apply even when a subscription merchant is coded elsewhere. Second, Mastercard may assess an acquirer that processes these transactions without registering the merchant, and an acquirer exposed to an assessment rarely keeps the account open. Ask which code the acquirer will use and whether registration is part of onboarding. The subscription and trial requirements themselves are rules 5.4.1 and 5.4.2 of Mastercard’s Transaction Processing Rules.
Failed rebills: retries, dunning and card updater
A failed rebill is revenue you can partly recover, inside limits the schemes set. Dunning is the name for your recovery routine: the retry schedule, the emails that ask the customer to update the card, and the point where you stop. The routine is yours to design, and the acquirer reviews it as part of the file. A retry schedule built on decline codes is the subject of dunning management.
The limits depend on why the issuer declined.
| Scheme | Decline signal | What you may do |
|---|---|---|
| Visa | A code in the ‘issuer will never approve’ category: closed account, lost or stolen card, stop payment order | Never resubmit on that card |
| Visa | Any other category, such as insufficient funds | Reattempt, up to 20 attempts in 30 days as of the April 2026 rules |
| Mastercard | Merchant advice code 01, new account information available | Get the new details from the customer or an updater service before the next attempt |
| Mastercard | Merchant advice code 02, try again later | Wait before resubmitting. The code names no time; Adyen recommends 72 hours |
| Mastercard | Merchant advice code 03 or 21, do not try again or payment cancellation | Stop |
The Visa limits come from Table 7-2, the decline response table of the Visa Core Rules as published in April 2026. Many summaries still quote an earlier ceiling of 15 attempts, and Visa reissues its rules twice a year, so confirm the current figure with your acquirer. Mastercard also bars any new attempt with the same card number and expiry date after certain declines, among them expired card, lost card and stolen card. Both schemes forbid manipulating the data of a retried transaction to get around a decline. Mastercard names two moves: changing the merchant name or merchant ID, and shifting volume to another merchant ID to evade a customer’s cancellation. What each response code means, and which ones are worth a retry, is listed in credit card decline codes.
Treat the scheme ceiling as a ceiling. A customer who sees four attempts for a subscription they believed was canceled files a dispute, so a workable schedule is short: a few attempts spaced days apart, then a pause and an email. Write the schedule down, because the underwriter will ask for it.
Expired and reissued cards are a separate case. A card account updater collects the new number or expiry date from the card networks before the billing date, so the rebill does not fail in the first place. OpenGate lists card account updater among its gateway capabilities.
The numbers an underwriter reads in a subscription file
An underwriter reads a subscription by cohort, and the first rebill is the cohort that matters most. Blended monthly figures hide it. Prepare these six:
- Trial-to-paid conversion: the share of trials that reach a first full charge.
- First-rebill dispute rate: chargebacks on first full charges divided by the number of first full charges.
- First-rebill refund rate, counted apart from chargebacks.
- Authorization rate on rebills, split between first and later cycles.
- Cancellations by cycle, and the channel each one came through.
- The share of monthly transactions that are first rebills.
Here is why the split matters, with illustrative figures. A brand starts 2,000 trials in a month. Of those, 1,100 convert and are charged $60, the first full price. Customers dispute 22 of those charges and the brand refunds 110. In the same month it rebills 5,900 older subscribers, and 12 of them dispute.
Blended, that is 34 chargebacks on 7,000 transactions, a ratio of 0.49 percent. By cohort the picture changes: the first-rebill dispute rate is 22 out of 1,100, or 2 percent, while the established base runs at 0.2 percent. First rebills are 16 percent of the transactions and 65 percent of the disputes.
Now double the trial intake through the same funnel. First rebills rise to 2,200 and their disputes to 44, while the base stays at 5,900 rebills and 12 disputes. The blended ratio becomes 56 on 8,100, or 0.69 percent. Customers behaved the same way in both months, and only the mix of charges moved. This arithmetic explains why an acquirer caps monthly volume on a trial-led account and raises the cap in steps: growth concentrates the riskiest charge. Each scheme computes its own version of the ratio, and the chargeback ratio guide explains how the monitoring programs read it.
Where mainstream processors draw the line
Stripe’s published policy shows where a mainstream processor draws the line: subscriptions are accepted, and the trial-led end of the model is refused. Its list of prohibited and restricted businesses, as updated on 22 September 2026, places negative option marketing, negative option membership clubs and reduced-price trials with unclear or hidden pricing among prohibited businesses, under its heading for unfair or deceptive practices. A subscription with clear pricing from the first charge does not appear on that list. Coaching programs sold on payment plans meet the same limits, as coaching payment processing explains.
In practice an account is exposed at two moments: at review, when a funnel is read as negative option marketing, and later, when the dispute ratio climbs. A specialized acquirer accepts the model and prices it. The ratio is another matter. Scheme monitoring programs apply to every acquirer, so a continuity merchant with a rising ratio faces the same escalation everywhere. Lowering it means working through the causes of subscription chargebacks one at a time, starting with the pre-billing reminder and the name on the statement.
The mistakes that cost subscription accounts
Most closed subscription accounts trace back to a short list of operating choices, and an underwriter looks for each of them before approval. Defects on the payment page itself are a separate list and belong to the negative option rules.
- An offer the application did not declare. A trial funnel on a second domain, billed through the same account, is found at the first website review or the first dispute.
- One reminder routine for every offer. A trial needs a notice before the first full charge, and a yearly plan needs one before each renewal.
- Retries that ignore a cancellation. A rebill sent after a cancellation request is a dispute you lose on the facts.
- A statement name that changes between the trial and the rebill. For physical product trials, Mastercard requires later charges to carry the same merchant ID and merchant name as the first one.
- Trial intake that grows faster than the cap. The arithmetic above shows what a doubling does to the ratio, and an acquirer treats volume beyond the agreed cap as a reason to review the account.
- Volume spread across several merchant accounts to dilute the ratio. Mastercard has acquirers watch for the same card number appearing at different negative option merchant IDs in their portfolio within 60 days, and Stripe lists evasion of chargeback monitoring programs among prohibited uses.
The last one ends applications: an underwriter who finds that pattern declines the file. The same goes for a funnel that depends on customers not noticing the conversion. No reserve makes it placeable, because the acquirer would still answer to the schemes for the practice itself. Our own review works the same way, and a funnel has to pass it before any bank sees the file.
What to prepare before you apply for subscription processing
Prepare three sets of material, and the file can be read in one pass. Screens: the offer page, the checkout as it renders on a phone, and each step of the cancellation path, captured from the live site. Messages: the signup confirmation, the pre-billing reminder and the cancellation confirmation, each with its sending schedule. Numbers: three to six months of statements with refunds and chargebacks separated, the six cohort figures above, your retry schedule and a billing calendar for each offer. If you have no history yet, send the screens and the messages and say so.
Then send your subscription file. The reader is a person, an underwriter, and you hear back within 1 business day. The answer takes one of three forms: an offer in writing with the rate, the reserve and the monthly cap, the list of what the file still lacks, or a no with its reason. Applying costs nothing, and nothing binds you until you accept an offer.