If your business charges customers' saved cards on a schedule, such as memberships, subscriptions, retainers, rent, tuition or payment plans, Mastercard has changed what every one of those charges must carry. Since October 23, 2026, each renewal or installment on a Mastercard is supposed to include a reference called the Transaction Link ID. Full compliance is due December 1, 2026. Mastercard starts billing for non-compliance on January 31, 2027, and it hasn't said how much.
For most businesses this is a job for their software, not their staff. But it's your account that carries the risk, so it's worth a five-minute conversation with whoever stores your customers' cards. This guide explains what the ID is, who has to do the work, what Visa and American Express require, and the questions to ask before December 1.
Key takeaways
- The Transaction Link ID is a 22-character reference Mastercard returns on a customer's first payment. Every later recurring, installment or card-on-file charge on that card is supposed to send it back.
- It has been required on those charges since October 23, 2026. Compliance is due December 1, 2026, and non-compliance charges begin January 31, 2027. The amount hasn't been published.
- The work falls on whoever stores the cards: your billing software, booking system or payments provider. If you run your own card vault, it's a database change and a test cycle.
- Cards saved before June 2, 2026 don't have an ID yet. Each picks one up on its next charge, which has to be stored.
- Visa and American Express aren't adding anything new. They've required their own IDs on these charges for years, so one question covers all three: is each network's ID being stored and sent?
What the Transaction Link ID is
When a customer pays with a card and agrees to let you charge it again later, that first payment is a customer-initiated charge. The renewals, installments and top-ups that follow are merchant-initiated: you start them, and the customer isn't there.
The card networks want every merchant-initiated charge tied back to the customer's original agreement. That's how the bank that issued the card knows the charge was expected. Mastercard's new tie is the Transaction Link ID. According to payment providers' developer documentation, it is 22 characters of letters, numbers, hyphens and underscores. Mastercard returns it in the response to the first payment, and your system has to:
- Capture it from that first payment.
- Store it next to the saved card.
- Send it with every recurring, installment or card-on-file charge on that card after that.
Refunds, captures and reversals of the same payment are linked automatically by the processor. The merchant's part is the later, separate charges.
The ID is meant to replace an older reference, the Trace ID, eventually. No end date has been announced, so providers advise sending both for now.
The dates
- June 2, 2026: Mastercard began issuing the ID on customer-initiated payments and monitoring for it.
- October 23, 2026: merchants are expected to include the stored ID on every merchant-initiated charge.
- December 1, 2026: the compliance date.
- January 31, 2027: Mastercard begins assessing non-compliance under its Data Integrity program, according to one provider's network update guide. The amount hasn't been published.
Mastercard bills these assessments to the processor. Whether, and how, a processor passes them on is set by your agreement. Missing references can also cost you in approvals, because a bank that can't link a charge to an agreement is more likely to decline it.
Who does the work
For most businesses, the answer is whoever stores the cards.
- If your billing software, booking system or payments provider stores the cards, the change is theirs to make. Ask them to confirm, in writing, that they're already capturing and sending the ID on Mastercard charges.
- If you run your own card vault, or your developers built your billing, it's your change: a 22-character field next to each saved card, code to capture the ID from first payments and send it on later ones, and a test cycle with your processor. With December 1 weeks away, start now.
Don't forget the cards already on file. A card saved before June 2, 2026 has no ID. Its next charge goes without one, and the ID Mastercard returns on that charge needs to be stored for the charges after it. Ask your provider how they're handling those cards.
What about Visa and American Express?
Neither is launching anything like this. Both already have their own version, and have for years:
- Visa assigns a Transaction ID to every authorization. Its stored-credential rules, introduced in 2017, require it on later merchant-initiated charges.
- American Express introduced an Original Transaction ID for the same purpose in October 2022.
- Discover has no change listed in the 2026 network update guides we reviewed.
So the Mastercard change is the newest piece of a rule the networks share. If your provider already handles Visa's and American Express's IDs properly, adding Mastercard's should be routine. If they're vague about all three, that's worth knowing too.
Questions to ask your software or payments provider
- Are you capturing Mastercard's Transaction Link ID on first payments and sending it with every recurring, installment and card-on-file charge after them?
- Since when? Are charges made since October 23 carrying it?
- How are cards saved before June 2, 2026 being handled?
- Are you still sending the Trace ID as well?
- Are Visa's Transaction ID and American Express's Original Transaction ID being stored and sent the same way?
- If Mastercard assesses non-compliance on my charges, will it appear on my statement, and who pays it?
What it will look like on your statement
Nothing changes on statements until the charges begin in February 2027, and Mastercard hasn't named the charge yet. If your processor passes it on, expect a new Mastercard line that mentions the Transaction Link ID, the TLID or data integrity. It is easy to mistake for a PCI fee, a network assessment or a fine for declined authorizations. Each of those has a different fix.
A Transaction Link ID charge has one fix: the software that sends your recurring charges has to send the ID. It isn't a price you can negotiate.
Where Statement Forensics fits
Statement Forensics reads processing statements line by line. When a statement bills a Transaction Link ID charge, the report names it as Mastercard's and says the fix is in your billing software or gateway. When a statement shows Mastercard recurring, bill-payment or card-on-file sales, the report's questions include whether the ID is being stored and sent. A statement can't show whether it is, so we ask rather than assume.
We don't sell processing or software, have no processor, ISO or platform affiliation, and take no residuals or referral fees.
Email a recent statement to audit@statementforensics.com.
Frequently asked questions
What is Mastercard's Transaction Link ID?
A 22-character reference Mastercard returns on a customer's first card payment. Every later recurring, installment or card-on-file charge on that card is supposed to send it back, so the card-issuing bank can link the charge to the customer's original agreement.
When is the Transaction Link ID required?
Mastercard has expected it on merchant-initiated charges since October 23, 2026. The compliance date is December 1, 2026, and Mastercard begins assessing non-compliance on January 31, 2027.
How much is the Mastercard non-compliance fee?
Mastercard hasn't published the amount. It bills processors, and your agreement decides whether and how a processor passes it on.
Does this apply to businesses that only take in-person payments?
Not to ordinary in-person sales. It applies to charges you make on a customer's saved card without the customer present, such as renewals, installments and card-on-file top-ups.
Do Visa and American Express have the same requirement?
Each has its own identifier, already required: Visa's Transaction ID since its 2017 stored-credential rules, and American Express's Original Transaction ID since October 2022. Neither announced a new identifier in 2026.
What happens to cards saved before June 2026?
They have no Transaction Link ID. The next charge on each goes without one, and the ID Mastercard returns on it should be stored and sent with every charge after that.