Credit/Debit card suspicious payments

pyrocrafter

I've recently set up a new website and accept payment through Worldpay. Then I noticed the occasional 'warning' from Worldpay, so phoned them to find out about these warnings.
It seems, generally, they are from customers who put in a completely different payment address to the cardholder's address and the bank approves it - Bonkers!:mad:
Can anyone tell me why, in these days of chronic credit card fraud, any payments would be accepted by the banks if the cardholder's address doesn't match the one on record? I find this unbelievably stupid. It means any of us can take another person's card and use it with our own address.

I can't think of any relevant reason why it shouldn't be rejected.

If we accept these payments online and the card is reported as stolen, then we will be liable for a chargeback. So, when these orders come through now, we just cancel them unless they can provide the correct cardholder address.

zerog

I don't know the answer to your question but Amex tends not to do address verification and sometimes not even NAME verification.

Perhaps the customers are getting confused with the card billing address and the delivery address.

reclusive46

zerog wrote: »

I don't know the answer to your question but Amex tends not to do address verification and sometimes not even NAME verification.

Perhaps the customers are getting confused with the card billing address and the delivery address.

Actually Amex is the only one who do name verification. They just don't support address verification for cross border payments.

The credit card networks (other than Amex who also issue payments) really don't care about CNP fraud because as you said all they will do is charge you back, unless you use American Express SafeKey, Verified by Visa and MasterCard SecureCode.

jonesMUFCforever

Some people work during the day so put work address for delivery - never had problems with that myself.

EdwinHearne

how can I get my credit card money back.if some one steal it.:j

Fruit_and_Nut_Case

EdwinHearne wrote: »

how can I get my credit card money back.if some one steal it.:j

I always find that a Voodoo curse works well.

nidO

On your AVS result info from WorldPay you should have a separate address and postcode check - The address check failing is not uncommon because this is an exact first line address comparison so a "not matched" result isn't terribly uncommon even when the address is actually the same (a missing/added comma, specifying building name + street on 1 or 2 lines, etc are enough to mark this as not matched) so the banks (and WorldPay) won't decline a transaction based solely on this.

You then also have the postcode check and this being different won't cause an automatic decline either but if this does fail to match it's more likely WorldPay will flag the transaction with a risk warning - The address alone being mismatched is generally not a sufficient reason for the transaction to be marked with a warning, especially if the cardholder is enrolled for authentication (VbV / SecureCode), and a CVV is supplied and matches.

Therefore how you handle payments where anything is amiss but the bank/WorldPay are still happy to accept the payment is basically down to you and your own fraud checks, but a cardholder being able to authenticate their payment generally supersedes whether an address is correct or not, so it's probably not particularly risky accepting payments where the address (and/or postcode) are flagged as incorrect but the cardholder authenticated.

agrinnall

Fruit_and_Nut_Case wrote: »

I always find that a Voodoo curse works well.

"You don't want to mess with Voodoo, that's definitely real"

Penny, The Big Bang Theory

p00hsticks

jonesMUFCforever wrote: »

Some people work during the day so put work address for delivery - never had problems with that myself.

That was my initial thought - but on a second reading , I think the Op is referring to the cardholder address, not the delivery address (online sites usually ask you to provide both, if they are different).

It's been a few years now since I worked in credit card processing, but my recollection is that as part of the authorisation process the bank will validate any partial address details supplied by the retailer (house number and numbers from postcode) and will return an indication if they fully match / partially match or don't match the cardholder details they have on record.

But it's then up to the merchant to decide if they want to proceed with the transaction or not - if they go ahead regardless of having been told the details don't match then I think they potentially lay themselves open to being liable if thereis subsequently a chargeback.