The majority of merchants challenge first-party misuse – but are they winning?