Empty Leg Flight Booking Payment: Stop Stolen Cards Before Wheels-Up
Secure every empty leg flight booking payment with 3D Secure, risk-based callbacks and manifest checks that fit a same-day departure window.
Photo: Pixabay
On this page 8 sections
- Why Empty Legs Attract Stolen Cards
- What a Fraudulent Leg Really Costs: A Worked Example
- What 3D Secure Covers on an Empty Leg Flight Booking Payment
- Set up Checkout to Collect Evidence
- Tier Verification to Fit the Departure Clock
- Make the Manifest the Last Payment Check
- Write Terms for Legs That Disappear
- Red Flags Dispatch and FBO Staff Should Know
Key takeaways
- An empty leg would have flown anyway, so a stolen card costs you the reversed fare, the fees and the real buyer you turned away. Fuel and crew time aren't part of the loss.
- 3D Secure protects the money on fraud disputes only. The issuer's fraud report still counts toward your Visa monitoring ratio, so you still need callbacks.
- Keep device and IP data for about 18 months. Visa's Compelling Evidence 3.0 reaches back to purchases made 120 to 365 days before the dispute, and a one-year policy deletes the oldest ones too soon.
- Authorize at booking and capture only after the booking clears its risk tier. Then a bad booking is a void, not a chargeback.
To cut stolen-card bookings on empty legs, make every empty leg flight booking payment prove itself before wheels-up. Authenticate online sales with 3D Secure. Authorize the card without capturing until the booking clears a review sized to its risk. Match the cardholder to the passenger manifest, and move doubtful buyers to a chip card at the FBO or a confirmed wire. Each step takes minutes, which matters when a leg goes on sale at 9 a.m. and departs at 4 p.m.
That speed is what sells repositioning flights, and fraud rings rely on it. A stolen card books the seats, strangers fly, and the real cardholder disputes the charge weeks later.
Why Empty Legs Attract Stolen Cards
Most charter revenue comes from repeat clients, corporate flight departments and brokers you already know. Empty legs are different. They go to whoever finds the listing first on your website, a marketplace or a social post, and many of those buyers are new to you. The sale is card-not-present and the ticket is large next to almost anything else bought online. Both sides also want the deal done today. Someone holding stolen card data looks for exactly that mix.
Fraud rings add a twist operators should expect. They resell "discounted private flights" to people who have no idea the card behind the booking was stolen. The passengers at the FBO may be completely innocent, while the cardholder is nowhere near the airport.
Disputes show up after the flight. Visa files them under condition 10.4, Other Fraud – Card-Absent Environment, which covers a cardholder who denies authorizing or taking part in an online or phone transaction (Visa's Dispute Management Guidelines describe the condition). Cardholders generally have 120 days to file. Under Visa's timelines, your acquirer (the bank behind your merchant account) then has 30 days to respond, according to Chargeflow's summary of network time limits.
Processors keep part of that window for their own review, so your real deadline is shorter. Find your processor's response deadline now, before the first dispute arrives. A leg flown in March can come back in June. A string of these disputes also brings your merchant account under review, and charter already gets closer underwriting than most categories. The first step in protecting your high-risk merchant processing is to stop feeding it fraud.
What a Fraudulent Leg Really Costs: A Worked Example
Many operators assume a stolen-card leg costs them fuel and crew time. It doesn't. The aircraft was repositioning anyway. The real loss is the reversed fare, the fees around it and the legitimate buyer you didn't sell to.
These numbers are illustrative. A midsize jet repositions from Teterboro to Palm Beach. The leg sells for $16,000 all-in. Carrying passengers adds $750 in incremental costs such as catering and handling. Your processor charges a $25 chargeback fee (fees vary by processor, so check your agreement). Processing fees are left out for simplicity.
| Outcome | Your Net From the Leg |
|---|---|
| Legitimate buyer | $16,000 − $750 = $15,250 |
| Stolen card, no 3D Secure, dispute lost | −$750 − $25 = −$775 |
| Stolen card, fully authenticated with 3D Secure | $15,250, but the issuer's fraud report still counts against you |
The gap between the first two rows is $16,025. A ten-minute callback is cheap insurance against a swing that size. It also explains why an empty leg you can't verify is better offered to your waitlist than flown.
What 3D Secure Covers on an Empty Leg Flight Booking Payment
3D Secure sends the buyer to their card issuer to authenticate, usually with a banking-app prompt or a one-time code. The payoff is a network rule. The April 2026 edition of the Visa Core Rules (section 11.7.5.3) treats a card-absent fraud dispute as invalid in two cases. The first is when the issuer authenticated the cardholder through Visa Secure and the transaction was sent with electronic commerce indicator (ECI) 5 and the authentication value. The second is an "attempted" authentication sent with ECI 6, which doesn't cover non-reloadable prepaid cards. Mastercard's equivalent protection applies to its fraud code 4837 when authentication succeeds with ECI 02 and a valid cryptogram.
Before you count on that protection, know where it stops. It covers fraud disputes only. A cardholder who disputes a cancelled leg, a swapped aircraft or a flight that "wasn't as described" gets no help from authentication. Visa also names certain merchant categories where, for U.S. domestic transactions, a 10.4 dispute applies whatever the ECI value. Ask your processor whether your account's category is one of them.
Operators are most often caught out by a third limit. An issuer has to report the fraud to Visa before it can file a 10.4 dispute. That report still counts toward your Visa Acquirer Monitoring Program (VAMP) ratio, even when the liability shift means the issuer can't take the money back. Authentication protects the fare, while verification protects your account. MannyPay supports 3D Secure authentication for online payments, and our guide to keeping 3D Secure from costing you sales covers checkout friction.
Set up Checkout to Collect Evidence
A same-day sale leaves no time for investigation after the fact, so your checkout has to gather the evidence up front. Ask for the cardholder's name, billing address, phone and email. Collect each passenger's full legal name as it appears on government ID. Ask whether the cardholder is flying and, if not, how they know the passengers. Add a checkbox for leg-specific terms and record the timestamp, IP address and terms version with it.
On the gateway side, turn on AVS (address verification), CVV2 checks, velocity limits on repeated attempts and 3D Secure. Set the account to authorize at booking and capture later. Captured funds that turn out to be fraudulent become a chargeback. An uncaptured authorization can simply be voided. Ask your processor how long an authorization stays valid on your account before you rely on this. Most payment gateways for online checkout offer these controls, including NMI and Authorize.net. Large legs can also hit a buyer's credit line, so read up on credit card limits and holds on charters before you set a maximum online ticket.
Keep device and IP data for about 18 months, subject to your processor's requirements and any privacy obligations that apply to you. Visa's Compelling Evidence 3.0 lets you defend a 10.4 dispute with two earlier undisputed transactions on the same card. Both must share at least two data elements with the disputed transaction (such as IP address, device ID, shipping address or account login), and at least one of those must be the IP address or device ID.
Visa's rule, as BlueSnap and Chargeflow summarize it, requires those earlier purchases to have been processed between 120 and 365 days before the dispute. That look-back covers a full year, and you still need the records while you build your response. A one-year retention policy would delete the oldest qualifying purchases just when you need them. If a past client buys a leg and later claims they never did, that history is your defense.
Settle who is merchant of record (operator, broker or marketplace) before you list legs. That choice decides whose name appears on the statement and who answers disputes; see whether the broker or operator should charge the client. Your account also has to be underwritten for charter. Running empty-leg sales through an account approved for another business is miscoding, and processors treat it as grounds for termination.
Tier Verification to Fit the Departure Clock
Running a full review on every booking would cost you same-day sales. Tiering puts your limited time where the risk sits. The triggers below are illustrative, so tune them to your own booking history and your processor's guidance.
| Risk Tier | Typical Signals | Verification Before Capture |
|---|---|---|
| Low | Returning client, cardholder flying, AVS and CVV2 match, 3D Secure authenticated | Confirmation email; normal ID check at the FBO |
| Medium | New customer, cardholder flying, minor AVS mismatch or departure within hours | Callback to the cardholder; photo of ID matching the card name |
| High | Cardholder not flying, unrelated passengers, mismatched geography, multiple card attempts | Hold capture; require 3D Secure, live callback and ID, or switch to chip card at the FBO or a confirmed wire |
Callbacks That Reach the Real Cardholder
A callback only helps if the real cardholder answers. Check the phone number against your other signals before you dial, and ask open questions: "Who's traveling with you?" or "What's taking you to Palm Beach?" Someone working from a script tends to stall. Log the time of the call and a short summary of the answers, because that note becomes dispute evidence.
Switch Doubtful Buyers to a Chip Card at the FBO
For bookings that still look wrong, take payment in person. The cardholder inserts or taps the physical card and shows matching ID. A buyer who can't produce the card has told you what you need to know. Visa's guidelines list a chip-read authorization record as the response to card-present fraud claims, so the in-person sale is much easier to defend. Mobile terminals for ramp-side payments let ground staff do this at the aircraft. Treat the chip sale as a replacement and void the online authorization so nobody is billed twice. Wires are the other route, with their own risk of spoofed bank instructions; our comparison of wire, card and crypto for charter payments covers the trade-offs.
Make the Manifest the Last Payment Check
Crew or FBO staff already check passenger IDs against the manifest before boarding. Add one question to that check: has payment cleared verification? If it hasn't, those passengers don't board. This only works if your published terms say so and your team enforces it every time, including on a busy Friday. Your operator's security program and federal rules set the actual ID and manifest requirements, so confirm them with your director of operations or compliance lead.
Write Terms for Legs That Disappear
Empty legs exist only as long as the primary trip does. If buyers don't understand that before they pay, a vanished leg turns into a dispute. Fraudsters also use cancellations to request refunds to a different card. Put each scenario in plain language at checkout. The approaches below are illustrative, and you should set your actual policy with counsel.
| Scenario | Possible Policy |
|---|---|
| Primary charter moves and the leg no longer exists | Full refund to the original card, or credit toward another leg if the client agrees in writing |
| Aircraft swapped for a different type | Notify the client; they accept the substitute or take a full refund |
| Weather or maintenance cancellation | Refund or rebook per written terms |
| Passenger cancels after purchase | Cancellation fee tied to timing |
| No-show | Forfeiture as stated in the terms |
Refund only to the original card. Turn down every request to send money to another card, a wire or a gift card, because that is how stolen funds get laundered. Our guides to tiered charter cancellation fees and chargebacks from weather, maintenance and missed flights go deeper. A refund also affects the tax collected on the sale, so involve whoever files your returns; see collecting federal excise tax on charter flights. This section is general information, not legal or tax advice, so confirm refund and consumer-protection rules with a qualified professional.
Red Flags Dispatch and FBO Staff Should Know
Train everyone who touches a booking to stop and escalate when they see these signs:
- Several declined attempts, then an approval on a different card
- A cardholder who isn't flying and gives vague or changing answers about who is
- Pressure to depart today combined with pushback on any verification
- Requests to split the fare across cards in different names
- Passenger or destination changes after payment
- Passengers who say they bought from a "travel agent" you've never heard of
When a booking trips these flags, don't capture and don't board. If you cancel, void the authorization or refund to the original card, record why, and block the card, email, phone and device in your gateway. Then tell your processor.
Here is an illustrative case. A same-day leg sells online. The billing address is in one state and the IP address in another, four passengers with different surnames are listed, and the cardholder says they won't be flying. The callback reaches someone who can't name a single passenger. The operator voids the authorization before capture, so no chargeback is possible, and sells the leg to the next buyer on its waitlist.
Before you change anything, pull the last 12 months of disputes and sort them by reason code. If most are Visa 10.4 or Mastercard 4837, 3D Secure and tiered callbacks will pay off. If most come from cancelled legs, fix your terms first. Then ask your processor three questions: is your account's category excluded from Visa's liability shift, how long does an uncaptured authorization last, and how many days do you get to answer a dispute? MannyPay sets up payment processing for jet and charter businesses, including gateways, 3D Secure and portable terminals. To have your setup reviewed, request a free quote, and a MannyPay specialist will respond within one business day.
Sources
- Dispute Management Guidelines for Visa Merchants (June 2024)
- 3D Secure Liability Shift: What It Covers and What It Doesn't (PayKings)
- What the 3D Secure Liability Shift Actually Covers (Redo)
- Card-Not-Present Fraud: Warning Signs and How to Prevent It (citing Visa Core Rules, April 2026 edition)
- Credit Card Chargeback Time Limits: Visa, Mastercard, Amex (Chargeflow)
- Visa Compelling Evidence 3.0 (CE3.0): Rules and 2026 Changes (Chargeflow)
- Visa's Chargeback Dispute Rule Update (BlueSnap)
This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.
