Address Verification Service (AVS)
A fraud-screening signal returned by the cardholder’s issuing bank during authorization on a card-not-present transaction. The service compares the billing street address and zip code submitted by the merchant against what the issuer has on file for the cardholder, then returns a single-letter response code indicating which fields matched.
What the Issuer Returns
The service runs during authorization, not after. When a merchant or gateway submits a card-not-present transaction, the billing address and zip code travel with the card details to the issuing bank. The issuer compares those values against the address on file for the cardholder and returns a response code in the same authorization message that approves or declines the transaction.
The service does not block the transaction. The issuer typically still approves the authorization as long as the card has funds and is not flagged for fraud at the issuer level. The response code is reported back to the merchant, but the decision to accept, hold, void, or flag the transaction belongs to the merchant — not the processor and not the issuer.
This structural detail catches most merchants by surprise. A transaction with a full address mismatch (AVS code N) will print “APPROVED” on the terminal just like a clean transaction will. The risk does not go away — it gets handed quietly to the merchant, who is now responsible for the chargeback exposure.
Common AVS Response Codes
The card networks define a standard set of single-letter response codes returned with every card-not-present authorization. The codes vary slightly by card brand — Visa, Mastercard, Discover, and American Express each maintain their own response sets — but the meanings overlap closely enough that a single working knowledge covers most situations.
Both street address and zip code match the cardholder’s billing record. Strongest signal in the response set, lowest fraud risk.
Zip code matches but street address does not. Common cause: customer typed an old address.
Street address matches but zip code does not. Often a customer-side typo on larger orders.
Neither street address nor zip code matches. Classic fraud signal. Issuer often still approves the authorization.
Issuer did not return verification data. Non-participating issuer, international card, or temporary system outage.
Card was issued by a foreign bank that does not support U.S.-style address verification.
The Cost of Ignoring AVS
The verification data is preserved in every authorization record and becomes part of the dispute file if a chargeback follows. An issuer reviewing a fraud chargeback where the merchant accepted a transaction with a full address mismatch will treat that as a significant signal in the cardholder’s favor. The chargeback is harder to win.
Response data also affects interchange qualification. Many interchange categories require a passing match and a CVV match for the lowest qualification tier. A failed match can downgrade the transaction to a higher-cost interchange category, raising the cost of that specific transaction and contributing to a higher overall effective rate across the month.
The CFPB’s guidance on card-not-present transactions notes that merchants bear greater responsibility for verifying cardholder identity in remote transactions — address verification is the primary mechanism for meeting that standard.
Frequently Asked Questions
No. The issuer typically still approves the authorization as long as the card has funds and is not flagged. The mismatch is reported in the response, but the merchant has to decide what to do. Some processors offer optional configuration to auto-decline AVS mismatches, but it is not the default on most accounts.
It is not legally required, but it is industry standard practice and required for the lowest interchange qualification tier on most card-not-present categories. Skipping AVS submission both raises the cost of the transaction and weakens the merchant’s defense if a chargeback follows.
U means the issuer did not return verification data — usually a non-participating issuer or a temporary system outage. G is specifically for non-U.S. issued cards where the foreign bank does not support U.S.-style AVS. Both remove a layer of defense without being fraud signals on their own.
Expand your understanding with these related payment processing concepts:
Want to Know How AVS Mismatches Affect Your Account?
Send us your last processing statement. We will show you what your processor is doing with mismatch responses, what your card-not-present chargeback exposure looks like at your current volume, and what configuration changes would close the gap.
Request a Free Statement ReviewNo obligation • No pressure • Response within one business day