How AVS works
- At checkout, you collect the billing street address and postal code.
- Your processor sends them with the authorization request.
- The issuer compares them with its records and returns a result for the street line and the postal code.
- You or your fraud rules decide what to do with the result. A failed AVS check does not by itself decline a payment unless you or your processor set a rule to block it.
Stripe notes that support for AVS varies by country and issuer: some countries don't use postal codes, some issuers don't verify street addresses, and most cards issued in the United States, Canada and the United Kingdom support street address verification.
Reading AVS results
- Full match (street and postal code): good sign, not proof of identity. A fraudster with the full stolen card record often has the billing address too.
- Postal code match only: common, often legitimate (apartment numbers and abbreviations trip up street matching).
- No match: a meaningful risk signal, especially combined with other signals such as a new account, rush shipping or an IP far from the address.
- Unavailable / not checked: the issuer couldn't or didn't verify. Treat as neutral, not as a pass.
Where AVS helps in disputes
American Express lists, among acceptable responses to an F29 card-not-present fraud chargeback, proof that you validated the address through authorization and shipped to that validated address, and a "Y" address verification response appears among the supporting items for digital goods. For Visa 10.4 fraud disputes, AVS results are supporting evidence alongside CVV, 3-D Secure and customer history.
A worked example
Two $310 orders arrive within minutes. Order A: AVS full match, CVV match, shipping to the billing address, returning customer. Order B: AVS no match, CVV match, shipping to a freight forwarder, new account, IP in another country. Neither result alone decides it, but together they make Order B worth holding for review while Order A ships.
Common mistakes
- Auto-declining every mismatch. Stripe notes legitimate customers fail AVS when they mistype or move without telling their bank.
- Treating a match as proof. AVS shows the address matches the issuer's records, not who typed it.
- Shipping to a different address and relying on AVS in a fraud dispute. The strongest evidence is a match plus delivery to that verified billing address.
- Not storing the result with the order, so it is missing when a dispute arrives weeks later.
How Verdikx helps
Verdikx is a fraud, chargeback and dispute platform for e-commerce and SaaS merchants, made by Verdikx LLC. When a connected processor reports AVS and CVV results (Stripe does), Verdikx adds them to the payment record in the dispute packet, and the evidence checklist flags them as "Payment authorization (AVS / CVV / 3-D Secure)". Drafts state the result ("the AVS and CVV checks matched") without claiming it proves the cardholder authorized the payment. On Growth and Pro, order screening weighs address mismatches with other signals, such as IP location, velocity and customer history, rather than blocking on AVS alone. See Shopify fraud detection.
Frequently asked questions
Does an AVS mismatch mean the order is fraud?
No. Legitimate customers fail AVS when they mistype an address, abbreviate differently or have moved without updating their bank, as Stripe notes. Treat a mismatch as one risk signal and combine it with others before declining or holding the order.
Does AVS work outside the US?
Partly. Stripe says support varies by country and issuer; some countries don't use postal codes and some issuers don't verify street addresses. Most cards issued in the United States, Canada and the United Kingdom support street address verification.
Does AVS give me chargeback protection?
Not by itself. Unlike successful 3-D Secure authentication, an AVS match does not shift fraud liability. It is supporting evidence: American Express, for example, accepts proof you validated the address and shipped to it as a response to an F29 fraud chargeback.
What is the difference between AVS and CVV?
AVS checks the billing address against the issuer's records. CVV checks the 3 or 4-digit security code printed on the card, which merchants may not store after authorization. Visa recommends using both as a layered check.
Should I block payments that fail AVS?
Usually only in combination with other risk signals or for high-risk products. Blocking every mismatch declines good customers. Many merchants block full mismatches on high-value orders and review the rest.
See it on your own orders.
Install on Shopify, or create a workspace for WooCommerce, another platform or your processors, and get your first verdicts in minutes. 7-day free trial, no percentage of what you win.
Sources
- Stripe Docs: Card verification checks (checked October 5, 2026)
- American Express: How to Manage and Help Prevent Disputes (merchant guide) (checked October 5, 2026)
- Visa Business News: Best Practices to Mitigate Risk of Account Takeover Fraud (2021) (checked October 5, 2026)
Last reviewed by Verdikx Research.