¿Qué es Address Verification System (AVS)?

What is AVS?

When a shopper enters a card online or over the phone, they also enter a billing address. AVS takes the numeric parts of that address, usually the street number and the postal code, and asks the issuer whether they match what is on file for the card. The issuer returns a short response code that says full match, partial match, or no match.

AVS is a card-not-present control. In a store, the chip and PIN prove the card is present and controlled; online, there is no card to read, so AVS and the security code stand in as evidence that the buyer knows details a random thief might not. It runs alongside the authorization, not as a separate step the customer sees.

For a fraud team, AVS is one input, not a verdict. A clean match lowers suspicion, a mismatch raises it, and many teams wire the AVS response directly into their checkout rules to approve, decline, or challenge an order.

Life with and without AVS

AVS does not stop fraud by itself, but it changes what a fraudster has to know and gives the merchant a lever to pull.

What changes	Without AVS	With AVS
What a thief needs	Just the card number and expiry.	The card number plus the real billing address.
Signal at checkout	No read on address control.	A match, partial, or no-match code to act on.
Rule options	Approve or decline on other data only.	Route by AVS result: pass, challenge, or block.
Chargeback posture	Weaker evidence in disputes.	A recorded match strengthens the case.

What it looks like in practice

A store gets an order for a high-value item shipping to one address, paid with a card whose billing postal code does not match the issuer's records. AVS returns a no-match on the postal code but a match on the street number, a partial result.

The order is not declined outright, because partial matches happen for honest reasons like a recent move. Instead the rule routes it to a step-up check and a manual look. The buyer cannot complete the challenge, the order is held, and a card-not-present loss is avoided without blocking the many genuine partial matches that come through every day.

Why AVS helps, and where it falls short

AVS raises the bar cheaply. It forces a fraudster to hold not just a stolen card number but the cardholder's real billing address, and it produces a signal on every card-not-present order that a team can feed straight into rules and into chargeback evidence. For low-cost, high-volume checkouts, that is a lot of protection for almost no friction.

Its limits are just as important to know. AVS mainly works for addresses in a few countries and is patchy internationally, it only checks numbers rather than the full address, and stolen identity data often includes the billing address, so a determined fraudster can pass it. Treat a clean AVS match as one green light among several, never as proof the transaction is safe.

What to watch in the data

Match, ship elsewhere. A clean AVS match paired with shipping to a very different address can still be fraud using stolen identity data.
Retry churn. Repeated attempts that tweak the address until AVS passes suggest someone guessing at the real billing details.
No-match on high value. Address mismatches on large or easily resold items deserve a challenge rather than a straight approve.
International blind spots. Orders from regions where AVS is not supported need other controls, since the code will be unavailable.
Uniform partials. A batch of orders all returning the same partial pattern can indicate a fraud run working around the check.

Quick questions

Does AVS check the whole address?

No. AVS compares only the numeric parts, typically the street number and the postal code. It ignores street names, cities, and formatting, which is why a full text match is not what AVS actually confirms.

Is AVS the same as CVV?

No, they are separate checks that pair well. AVS tests whether the buyer knows the billing address, while the CVV tests whether they physically have the card in hand. Many merchants require both to pass on card-not-present orders.

Can a fraudster pass AVS?

Yes. When stolen data includes the cardholder's billing address, AVS will return a match even though the buyer is a thief. That is why AVS should raise or lower risk within a broader decision, not settle it on its own.

Should I always decline a no-match?

Not automatically. Genuine customers trigger mismatches after moving, mistyping, or using a work card, so hard declines cost real sales. Many teams route no-match and partial results to a challenge or review instead of an outright block.

Does AVS work outside the United States?

Support is strongest in a handful of countries and thin elsewhere, so the response may come back as unavailable for many international cards. For those orders you need to lean on other signals like device, velocity, and 3-D Secure.