Address Fraud: How Bad Address Signals Become Payment Disputes

Address fraud is when someone uses a fake, stolen, or deliberately mismatched billing or shipping address to obtain goods or services without paying for them. The address itself is rarely the crime, it's the trail that determines whether the resulting dispute turns into a fraud chargeback, a false positive on a good order, or a friendly-fraud claim your evidence can beat.

This guide connects the address signals you see at checkout to the outcomes that follow: which orders to stop, which to let through, what to keep as evidence, and how the resulting chargeback fraud case actually gets resolved.

¿Qué es el fraude de dirección?

Address fraud is a form of identity-related fraud in which someone supplies false address information to obtain products, services, or credit they never intend to pay for. In e-commerce it almost always pairs a stolen card number with either a fake shipping destination or a spoofed billing address.

There are two main variants. Billing address fraud uses false or stolen billing details to push a payment through, while shipping address fraud redirects goods to a destination, often a freight forwarder or vacant property, that can't be traced back to the fraudster.

¿Cómo funciona el fraude de direcciones?

Fraudsters obtain card and identity data through phishing, data breaches, or dark web marketplaces, then use it to pass checkout checks. Social engineering helps them extract missing details directly from victims, while VPNs and proxies mask their true location so an order looks like it originates near the billing address.

Once an order clears, goods are frequently sent to a reshipping mule or forwarding service that relays them onward, breaking the trail. The genuine cardholder only discovers the unauthorized charge later, and disputes it, leaving the merchant to prove what happened.

Third-Party Fraud vs. First-Party Misuse: Why the Difference Matters

Not every address-flagged order is the same kind of problem, and treating them identically wastes evidence you'll need later. True third-party fraud means a criminal who is not the cardholder placed the order, usually with a stolen card and a shipping address the real cardholder never chose. These disputes land under card-network fraud reason codes, such as Visa's 10.4 (Other Fraud, Card-Absent Environment) or Mastercard's 4837 (No Cardholder Authorization), and you are almost never getting the money back once the network confirms the transaction was unauthorized.

First-party misuse is different: the genuine cardholder placed the order themselves, received it, and later disputes it anyway, often as friendly fraud. Here, an address that looks slightly "off" (a new apartment, a gift address, a work address) is not evidence of a crime. It's exactly the kind of mismatch that a legitimate buyer creates, and it's why address signals need to be weighed alongside delivery confirmation, device history, and login data rather than used as a standalone verdict.

¿Cuánto les cuesta a los comerciantes el fraude de direcciones?

The most direct hit is financial: merchants lose the goods, the shipping cost, and the sale value, then absorb chargeback fees on top when the cardholder disputes the transaction. Zoomed out, card fraud losses aren't shrinking. Consumers reported losing more than $12.5 billion to fraud in 2024, a 25% jump from the prior year, according to the FTC. Globally, card fraud losses reached $33.83 billion in 2023, per the Nilson Report, with the U.S. responsible for roughly 42% of that total.

Repeated address-fraud disputes also inflate your dispute ratio, and that ratio is monitored directly by the card networks. Under Visa's Acquirer Monitoring Program, merchants processing 1,500 or more disputes and fraud transactions a month are flagged "Excessive" once their combined fraud-and-dispute ratio hits 1.5%, effective April 2026, a threshold your payment service provider is required to police. Crossing it means fines, reserve requirements, or a forced compliance plan, on top of whatever you already lost to the fraud itself.

Address-Fraud Red Flags and When They're False Positives

Most address fraud shows a recognizable pattern at checkout. The signals below are strongest when several appear together on the same order, and weakest, often meaningless, in isolation.

Auto-declining on a single mismatch costs you revenue from real customers who moved, ordered a gift, or used a work address. Reserve automatic declines for orders that trip two or more signals at once, and route single-signal mismatches to manual review or a step-up check instead.

How Do You Prevent Address Fraud Without Blocking Good Orders?

No single tool catches every case, so effective prevention layers several checks that each close a different loophole. The table compares the core methods and what they actually verify.

Round out the tooling with operational habits: manually review flagged orders, train staff to spot suspicious patterns, keep customer data clean, and monitor transactions continuously as part of a broader ecommerce fraud prevention program so you act before goods ship.

Evidence to Retain Before and After Fulfillment

Whatever you decide at checkout, keep a record of why. The evidence that stops a fraud investigation from stalling, and wins a dispute later, is the same evidence you should already be capturing:

• The AVS match or mismatch code returned at the moment of authorization
• IP address and geolocation data captured at checkout, timestamped
• Device fingerprint and account history, including whether this device or email placed prior orders
• Delivery confirmation or signature from the carrier showing the package reached the address on file
• Order and shipping notifications sent to the customer's email or phone on record
• Manual review notes explaining why a flagged order was approved, held, or declined

Merchants using Chargeflow Prevent get this evidence trail captured automatically at the point of sale, rather than reconstructed under a dispute deadline weeks later.

From Signal to Settlement: How Address Evidence Wins or Loses the Dispute

When a stolen card or fake address is used, the genuine cardholder eventually sees the charge and disputes it as unauthorized, producing a fraud chargeback the merchant almost always loses under reason codes like Visa's 10.4. Undelivered or misdelivered goods create a similar result when the buyer never receives what they ordered, this time under a services-not-received code rather than a fraud one.

Layered address verification is the most effective way to prevent both outcomes before they start. For the fraud and delivery disputes that still slip through, having chargeback alerts in place buys you time to intervene before the case escalates, and a consistent chargeback fraud prevention and representment process is what actually recovers the revenue once a case is filed.

Preguntas frecuentes

¿Cuál es un ejemplo de fraude de dirección?

A fraudster buys a stolen card number online, enters the real cardholder's billing address to pass AVS, then ships the goods to their own address or a freight forwarder. The genuine cardholder later disputes the charge as unauthorized, leaving the merchant with the loss.

Is address fraud always third-party fraud?

No. Most address fraud involving a stolen card and a fraudster-controlled shipping address is third-party fraud. But a mismatched or unusual address can also show up on a legitimate order that the genuine cardholder later disputes anyway, which is first-party misuse, commonly called friendly fraud, not a crime committed by an outside party.

Does an address mismatch always mean the order is fraudulent?

No. Gift orders, new apartments, and work addresses all produce legitimate billing/shipping mismatches. Treat a single address mismatch as one input among several, not an automatic decline, and reserve holds or declines for orders where multiple risk signals appear together.

How does AVS help prevent address fraud?

AVS compares the billing address a shopper enters at checkout with the address on file at the card issuer and returns a match or mismatch code. A mismatch flags an order for review or decline, but AVS checks billing details only, not the shipper's identity or the shipping address itself, so it needs to run alongside other checks.

¿Puede el fraude en las direcciones dar lugar a Contracargos?

Yes. When a stolen card or fake address is used, the genuine cardholder disputes the unauthorized charge, producing a fraud chargeback under reason codes such as Visa's 10.4. Undelivered goods sent to a fraudulent address produce a similar dispute under a non-receipt reason code instead.

Chargeflow automates evidence gathering and representment across every reason code, with pay-only-if-we-win pricing. Start for free to protect your revenue on autopilot.