AVS returns granular codes (full match, ZIP-only, street-only, no match, unavailable), and the partial results carry the signal. Full match is weakly positive (friendly fraudsters match their own address perfectly); no-match on a domestic card is strongly negative; 'unavailable' dominates international volume and means nothing. In disputes, AVS matters twice: match + delivery-to-that-address is the fraud-code backbone, and an unexplained mismatch you fulfilled anyway weakens everything else.
Reading the codes
Behind Shopify's indicator sit network codes:
- Full match (street + ZIP): consistent with the cardholder — or someone who knows them well. Friendly fraud passes AVS by definition.
- ZIP-only match: common and mostly benign (apartment formatting, abbreviations). Weak signal alone.
- Street-only match: rarer; moved-recently or typo patterns. Slightly stronger negative than ZIP-only.
- No match: on a domestic consumer card, a genuine red flag — combine with anything else and act.
- Unavailable/not supported: the default for most non-US cards. Not a risk signal — the absence of a tool.
Policy per result
Sane defaults: fulfill full and ZIP-only matches; treat street-only as a soft flag needing one corroborating signal; hold no-match domestic orders for verify-first; route international 'unavailable' volume to the country-tier rules since AVS abstains.
Don't auto-cancel on AVS alone — gift shipments and recent movers generate legitimate mismatches. AVS is one instrument in the panel, not the panel.
AVS in disputes
On fraud codes, the load-bearing sentence is: "AVS full match at authorization; delivered to the AVS-verified address." Authorization-time identity plus physical delivery to that identity's address — the 10.4 backbone, and a CE 3.0 amplifier when prior orders share the address.
The inverse also binds: fulfilling a no-match order without verification, then disputing the fraud claim, argues against your own risk posture. If you fulfilled past a red flag, your packet needs the verification story that justified it. Aurai includes AVS results and the delivery-address linkage automatically in every fraud-code rebuttal.
Frequently asked questions
Does AVS full match mean the order is safe?
No — it means the buyer knows the billing address. Friendly fraud (60–75% of disputes) passes AVS perfectly. It's evidence for later more than protection now.
Should I cancel orders with AVS no-match?
Domestic no-match deserves a hold and verification, not auto-cancel. International 'unavailable' isn't a mismatch at all — most foreign banks don't support AVS.
Post reflects public documentation, industry surveys, and Aurai's own book of disputes as of the publish date. Visa, Mastercard, American Express, Discover, Stripe, PayPal, and Shopify are trademarks of their respective owners; Aurai is independent and not endorsed by any of them. Network rules change — always verify current official rules before acting on any specific tactic.