The Card Check Does Not Classify Your Virtual Address. It Compares What You Typed to What Your Issuer Has on File

Your issuer may not be checking the street line at all

The rules that govern this sit in the Visa Core Rules and Visa Product and Service Rules, in the section on address verification. In the edition dated 18 April 2026, section 10.11.1.2 sets out what a participating issuer must do. In the regions where the rule applies, it must participate in the Address Verification Service. It must perform address verification for each inquiry. It must verify the postal code, or the country equivalent, for regions where postal codes are in use, and it may optionally verify the street address. It must return a result code in the authorization response.

The word optionally decides whether the street line was ever compared. For an issuer that verifies only the postal code, the street line in your checkout form was never compared to anything. If your payment stopped, the street line is not the reason, and rewriting it will not change the outcome.

This also explains a pattern that looks strange from the outside. A payment can go through with a suite number that is formatted differently from the one on file, or with an old street address entirely, as long as the postal code matches and the issuer is not verifying the street. Nothing went wrong in that case. The part that would have caught the difference was never switched on.

A failed check is not a decline, and two different parties can stop the payment

The second common misreading is treating a failed address check as an automatic refusal. Stripe's guidance on payment rules states the opposite directly. A payment can still succeed even when the security code or address check fails, because issuers evaluate many risk factors when deciding to authorize a payment. An issuer may consider a payment that failed postal code verification legitimate and approve it anyway.

The same page then describes the other direction. Merchants can enable rules to block certain payments that the card issuer approved. So there are two decisions here, made by two parties, and they can disagree. Your issuer can approve a payment your merchant then blocks. Your merchant can accept a result that another merchant's rules would have blocked.

Chase, writing to the businesses that accept cards rather than to the people carrying them, is unusually plain about this. Asked whether a merchant should ever decline automatically on the address result alone, its guidance says the decision is up to your business, and that the result is a single value to help inform your decision to either approve or decline the transaction.

One detail in Stripe's built-in rules is worth knowing if you pay a lot of vendors that use it. The built-in rule keyed to this check is about the postal code, and the documentation notes that it does not block payments where the customer did not provide a postal code, or where their card issuer does not support verification. There is no equivalent built-in rule for the street line. At those merchants, a street mismatch on its own does not trigger the default protection.

The same bank tells shoppers and merchants two different stories

If you have been told that a mismatched billing address means a declined card, you were told something a bank published. It just was not published on the page written for the business taking your money.

The Chase page written for cardholders explains that transactions requiring a full billing address are secured by the address verification system, and says a transaction is usually declined if those addresses do not match. The Chase page written for merchants says the decision is up to your business, and lists the variables a business should weigh alongside the address result, including the transaction amount, the shipping address, the security code, and 3D Secure.

Both pages are current, both are on the same domain, and they are describing the same mechanism from two seats. The consumer page gives the outcome and leaves out what the mechanism actually compares. That page is the direct source of the belief that your address type got you refused. The merchant page is where the actual decision lives.

Three places the same payment stops, and only one is yours to fix

Once the issuer's decision and the merchant's decision are separated, and the possibility that no comparison happened is added, the failures people describe interchangeably turn out to be three different events with three different remedies.

Cards issued outside a few countries are often never checked

Participation in address verification is not global, and the boundaries are written into the network rules rather than left to custom. The Visa rules that require issuer participation apply to a defined set of regions rather than to every issuer everywhere, and the same rulebook contains a separate provision telling US operators of unattended terminals what to do when a transaction is declined due to non-support of the service. A network does not write a rule for a situation that does not arise.

The payment processors say the same thing in plainer language. Adyen states that credit card issuers in the United States, Canada, and the United Kingdom, and Visa issuers in Europe, must support address verification requests, and that in other countries or regions this is not the case. Its code mapping includes a value meaning the issuer is a non-participant outside the United States, with the address not verified for an international transaction. Stripe notes that support varies by country and issuer, and that most cards issued in the United States, Canada, and the United Kingdom support street address verification.

Chase tells its merchants the practical version. Address verification is limited outside the United States, Canada, and the United Kingdom, many international issuers do not participate, and they often return codes meaning not supported. Merchants are advised to adjust their rules accordingly, which is a reminder that some of them will not.

This is the situation behind a complaint we see worded as a foreign card failing on a US business address. In that pairing the address is a bystander. What the merchant received was an absence of information, and what happened next was a policy decision about how to treat an absence.

Visa now sends six result codes, and a published table we opened still listed the retired ones

If you go looking for what a result code means, you will find tables listing far more than six values. Visa now sends six, so most of the rows in a twenty-row Visa table describe values that are no longer sent.

Cybersource, which is a Visa company, published the change as a mandate with an effective date of April 14, 2023. Visa retired certain existing values and now sends only six: a match on both street and five-digit postal code, a partial match where the street matches but the postal code does not, a partial match where the postal code matches but the street does not, a no match on both, a system unavailable result, and a result meaning the address information was unavailable, which the mandate explains can mean a US bank does not support verification outside the US.

One of those deserves attention because at least one published table we opened has it backwards. When we read a large issuer's merchant support page on September 17, 2026, its table listed the code that means the postal code matched while the street did not as a full match. Two other rows in the same table contradict themselves outright. One describes a code as an address and postal code match in one column while the same row's plain English column says not supported, and another says the address matches while its plain English column says no match. Its Visa column also still carries values that the mandate retired. Rows that disagree with themselves are the clearest sign available that the page has drifted rather than that two sources disagree.

We are not pointing at that page to score a point against a bank. We are pointing at it because it is the kind of page a person finds first, and because a code table is exactly the sort of artifact that looks authoritative while quietly aging. If you are reading a result code, read it against the network's own current definition and check the date on whatever table you are holding.

What a mailbox address actually adds is formatting, not a category

There is a real complication for people using a mail receiving address, and it is not the one the vendor pages argue about. It is that the same address can be written two legitimate ways.

The Domestic Mail Manual, in section 508.1.8, requires a mailbox identifier for addresses served by a commercial mail receiving agency, using either PMB or the number sign. It then permits two formats. The identifier can sit on its own line above the street address, or it can be appended to the street address line itself. Both are correct, and either one can be the version you typed when you first gave the address to your bank.

Your issuer stored one of them. Every checkout form after that is a chance to type the other one. Chase's merchant guidance lists this class of problem explicitly, noting that address variations such as Apt 2B versus the number sign followed by 2B can cause mismatches, and that minor differences such as St. versus Street, or a missing apartment number, may cause partial matches. The mismatch is between two strings that a human reads as identical. The comparison reads them as different.

The same guidance adds one line about post office boxes worth quoting for what it does not say. It says issuers may have specific policies, leading to partial or no matches. That is a statement about variation between issuers, not a rule against a category.

• Write down the exact string your issuer has on file, including whether the mailbox identifier is on its own line or appended to the street line.
• Use that string at checkout every time, rather than the version that looks tidier on an invoice.
• Expect abbreviations to matter, because St. and Street are different characters even when they are the same street.
• If you changed the billing address on one card, check the others, because Chase warns that changing one billing address may not automatically update it across all of your credit card accounts.

The step you can actually change

The billing address is a record your issuer keeps, and it is meant to be editable. The Chase consumer guidance states that your billing address can be different from your home address, and explains what the field is for: it is where your card issuer sends important account information, such as new cards and changes to your account.

That sentence sets the real constraint, and it has nothing to do with verification. Whatever address you put in that field is where a replacement card will be mailed. If mail sent there reaches you reliably, the field is doing its job. If it does not, you have created a problem that no checkout form will ever tell you about.

The routes to change it are ordinary. Chase lists the website or app, the phone number on the back of the card, a request by mail, and a branch visit, and notes that updates made online may not appear immediately. The detail most people miss is the one about multiple cards, because the change does not propagate on its own.

Once the record is updated, the comparison that failed before has something to match. That closes one of the three paths. It is also why the framing matters. The question was never whether an address type is allowed in the abstract. The question is whether your issuer will write this address down, and that is a question you ask them.

What we cannot tell you, given that we are the ones selling addresses

We went looking for a rule that says an issuer will not accept a mail receiving address in the billing field, because if one exists our readers should hear it from us first.

In the issuer documentation we opened, we did not find one. The Chase page about billing addresses does not mention post office boxes, physical address requirements, or mailbox services at all. The federal customer identification rules that banks follow describe a residential or business street address for an individual and a principal place of business or other physical location for an entity, and the part of the regulation we read does not mention mailboxes or virtual addresses. That is a bounded finding about the documents we read, not a general permission, and we are not going to translate it into a promise that your issuer will accept ours.

Two corporate card issuers do name the category, and they name it at the application step rather than at verification. Ramp's help center excludes a virtual office address from an application address by name, and Brex says it does not accept private mailboxes or other mailbox services as valid business addresses, though it allows a virtual address when a beneficial owner or control person has a verifiable physical presence in the United States. We wrote about both in a separate piece on corporate card applications. Neither statement is about the billing address field on a card already in your hand, which is the field this article is about.

Other restrictions sit at that same application step. Chase's page on credit card applications says a physical US address is generally required when you submit your forms, and that post office boxes may not be accepted for the initial verification stage. Wells Fargo, describing what it will take as proof of a residential address when someone opens a deposit account in person and their identification does not already show that address, states that it cannot accept a post office box or private mailbox as a residential address. As we read them, all of these are about an application rather than about the billing address on a card you already hold. If you are applying for a new card rather than updating one you have, the application rules above are the ones to read first.

Some of the addresses we rent are registered as commercial mail receiving agencies, which means the same questions apply to us as to anyone else in this business. Whether a particular issuer will record a particular address as your billing address is a decision made inside that bank, on a phone call we are not on. What we can say is that the question is answerable, that it is answered by your issuer rather than by your address provider, and that the answer takes one conversation to get.