What is Address Verification Service?
Also: AVS
An issuer service that compares the billing address submitted with a transaction against the cardholder's address on file.
The Address Verification Service (AVS) is a fraud prevention tool where the acquiring bank forwards the cardholder's billing address, provided by the merchant, to the issuing bank as part of the authorisation request.
The issuer then checks this submitted address against the cardholder's registered address for that specific card account.
The result of this comparison is returned to the acquirer and subsequently to the merchant within the authorisation response, typically as a single character AVS response code indicating the level of match (e. g. , 'Y' for full match, 'N' for no match,
'X' for exact match but address not verified internationally).
Merchants typically integrate AVS checks into their online checkout or point-of-sale systems, displaying the AVS response code alongside other authorisation details.
This allows them to implement risk-based rules, such as declining transactions or flagging them for manual review if the AVS response indicates a mismatch, especially for high-value orders or new customers.
A common operational challenge arises when cardholders have recently moved house and have not updated their address with their card issuer, leading to AVS mismatches for legitimate transactions.
Worked example
A merchant reviews a £650 transaction where Address Verification Service is the deciding factor. The merchant scores the order, checks card and customer signals, applies a manual review threshold, and either releases, rejects, or routes the transaction with stronger controls.
The operational cost is modelled at 25 basis points of expected fraud loss, or £1.63, and the relevant action must complete before capture. Step 1 is to capture the original request data, including amount, currency, issuer country, MID, and response or status code.
Step 2 is to apply the merchant's rule set, for example whether to retry, challenge, refund, release goods, or hold for review. Step 3 is to reconcile the result against acquirer reporting so finance can see the cash impact.
If the rule improves the outcome by even 50 basis points on 2,000 similar monthly transactions, the merchant protects roughly 10 extra orders from avoidable failure or loss.
Scheme notes
Visa, Mastercard, American Express, and Discover all monitor merchant risk, but programme names, thresholds, and escalation paths differ. Visa uses VAMP and integrity programmes for excessive disputes, fraud, and prohibited activity, while Mastercard uses programmes such as ECP, BRAM, SAFE reporting, and MATCH.
Acquirers may apply stricter controls than the schemes, including rolling reserves, delayed settlement, or termination, because they carry portfolio-level liability.
Why it matters for merchants
Commercially, this affects fraud losses, reserve requirements, scheme monitoring exposure, and whether a merchant can keep processing at scale.
For a merchant processing £500,000 per month, a 25 basis point movement is worth £1,250 before secondary effects such as disputes, reserves, support tickets, or failed delivery costs.
The impact is larger in high-risk, subscription, travel, digital-goods, and cross-border models because issuer decisions and scheme monitoring can compound quickly.
Cardflo can help by combining acquiring access, MID routing, orchestration rules, KYB review, and chargeback tooling where relevant, so the merchant is not dependent on one processor interpretation or one fixed transaction path.
Frequently asked
Does a negative AVS result automatically decline the transaction?
Not necessarily. The AVS result is an informative code sent by the issuer; it is typically the merchant’s payment gateway or risk engine that decides whether to block the payment based on that code.
Many merchants allow transactions with partial postcode matches while blocking those with complete address mismatches.
Can AVS alone protect against chargebacks?
AVS provides limited protection and does not offer a liability shift like 3D Secure does.
While a positive AVS match can help a merchant win a 'civilian' dispute regarding card-not-present fraud, it is often considered a weak signal on its own because billing data can be easily obtained or social engineered by fraudsters.
Which data should a merchant store for Address Verification Service?
Store the transaction ID, MID, acquirer, amount, currency, issuer country, card scheme, response or status code, timestamp, and any 3DS, exemption, refund, or dispute reference. For card transactions, keep authorisation and Clearing identifiers because settlement or chargeback questions may arrive 30 to 120 days later.
For regulated flows, keep customer consent and evidence records for at least the period required by local law or scheme rules. Good records reduce investigation time from hours to minutes when acquirer reporting does not match the order system.
How often should Address Verification Service be reviewed?
High-volume merchants should review exception rates weekly and trend the main metric monthly by scheme, acquirer, issuer country, MCC, and payment method. A movement of 20 to 50 basis points can be material if the merchant processes thousands of orders.
Finance should reconcile the cash impact at settlement level, while risk or payment operations should analyse the root cause. Reviewing only blended totals hides problems that appear on a single BIN range, region, or MID.
What threshold usually triggers action on Address Verification Service?
The threshold depends on the category, but merchants should investigate any sudden change above 10% relative movement or 25 basis points absolute movement. For disputes and fraud, scheme thresholds such as 0.9% under Visa monitoring or 1.5% under Mastercard ECM can create immediate escalation risk.
For settlement or pricing items, even 5 to 15 basis points can justify routing or contract review. The key is to set thresholds before month-end, not after a processor invoice or scheme notice arrives.
Can Address Verification Service differ between acquirers?
Yes. Acquirers can map response codes differently, apply different risk rules, support different data fields, and settle on different cycles.
One acquirer may return a generic decline while another exposes issuer advice that allows a safe retry. Fee treatment can also vary by contract, especially for cross-border, FX, premium cards, and alternative payment methods.
This is why merchants using orchestration should compare performance by acquirer and scheme rather than relying on a single blended approval or cost figure.
What is the first remediation step when Address Verification Service creates losses?
Start with a 30-day sample and split it by scheme, issuer country, card product, payment method, MID, and response or dispute code. Quantify the value at risk in cash terms, not just percentage points.
Then decide whether the fix is operational, such as better evidence or customer communication, technical, such as richer data or 3DS indicators, or commercial, such as a different acquirer route.
Recheck the same metric after one full settlement or dispute cycle to confirm the change worked.
See how Address Verification Service plays out in practice
Industries and regions where this term drives real acquiring, routing, or dispute decisions.
Related terms
The 3- or 4-digit code printed on a card, used to prove the cardholder physically holds the card.
An authorisation response refusing to fund a transaction, returned by the issuer with a reason code.
A transient decline (e.g. insufficient funds, do-not-honour, generic) that can usually be recovered with retries.
A terminal decline (e.g. lost/stolen, pickup card, invalid account) that must not be retried.
Related guides.
Ready to improve your payments setup?
Tell us about your business. We'll match you with the right acquiring partners and the right route, typically inside a week.