Gift Cards and Prepaid Cards: Why There's No Billing Address and How Merchants Handle It

Gift cards and prepaid debit cards present a unique challenge for address verification: they often have no billing address on file with the issuer, making AVS checks return "unavailable" results. This creates a significant gap in fraud prevention that both merchants and fraudsters are well aware of.

Why Gift Cards Lack Address Data

When a consumer purchases a Visa, Mastercard, or Amex gift card at a retail store, no personal information is collected. The card is activated with a balance but has no cardholder name, no billing address, and no identity verification. Even "reloadable" prepaid cards may have minimal registration requirements. When these cards are used online and the merchant requests AVS verification, the issuer returns a "U" (unavailable) code because there's simply no address data to check against.

The Fraud Magnet Effect

Fraudsters gravitate toward prepaid and gift cards precisely because they bypass address verification. Common schemes include: purchasing gift cards with stolen credit cards (in-store or online), using gift cards to buy easily resellable merchandise, layering transactions through multiple gift cards to obscure the funding source, and exploiting merchant systems that accept AVS "unavailable" responses without additional verification. The financial impact is substantial — gift card fraud accounts for an estimated $1 billion in annual losses.

Merchant Strategies

Merchants employ several strategies to manage gift card risk: requiring additional verification for gift card transactions (email verification, phone verification, CAPTCHA), implementing velocity limits on gift card purchases and redemptions, flagging transactions where AVS returns "unavailable" for manual review, limiting the value of gift card purchases, restricting gift card use to physical delivery (no digital goods), and monitoring for patterns of gift card usage that indicate organized fraud rings.

Registered Prepaid Cards

Some prepaid cards require registration, which creates an address on file. Registered cards can participate in AVS checks, providing the same billing address verification as regular credit or debit cards. This is why some merchants distinguish between registered and unregistered prepaid cards in their fraud rules — registered cards carry lower risk because they have an identity and address attached.

The Evolving Landscape

The payment industry continues to develop solutions for the gift card verification gap. Tokenization and network-level fraud signals are supplementing traditional AVS. Some card networks now provide card-level risk scores that account for the card type, funding method, and usage patterns. For merchants, the practical advice remains: never treat AVS "unavailable" as equivalent to AVS "match" — it's a missing signal, not a positive signal, and should trigger compensating controls proportional to the transaction risk.