Visa CNP fraud prevention tools (Card Not Present)
Appropriate preventive action can help reduce fraudulent transactions and potential customer disputes. Make use of these Visa tools and controls to verify the legitimacy of the Visa cardholder and the card in every card-not-present transaction.
Address Verification Service (AVS)
Allows card-not-present merchants to check a Visa cardholderâ€™s billing address with the card Issuer. The merchant includes an AVS request as part of the authorization and receives a result code indicating whether the address given by the cardholder matches the address on file with the Issuer.
Card Verification Value 2 (CVV2)
Is a three-digit number imprinted on the signature panel of Visa cards to help card-not-present merchants verify that the customer has a legitimate card in hand at the time of the order. The merchant asks the customer for the CVV2 code and then sends it to the card Issuer as part of the authorization request. The card Issuer checks the CVV2 code to determine its validity, then sends a CVV2 result back to the merchant along with the authorization. CVV2 is required on all Visa cards.
To protect CVV2 data from being compromised, Visa U.S.A. Inc. Operating Regulations prohibit merchants from keeping or storing CVV2 numbers once a transaction has been completed.
Verified by Visa (VbV)
Enables e-commerce merchants validate a cardholder’s ownership of an account in real-time during an online Visa card transaction. When the cardholder clicks “buy” at the checkout of a participating merchant, the merchant server recognizes the registered Visa card and the â€œVerified by Visaâ€ screen automatically appears on the cardholderâ€™s desktop. The cardholder enters a password to verify his or her identity and the Visa card. The Issuer then confirms the cardholderâ€™s identity.
AVS Response Code
X â€“ Match: (MasterCard only) Address and nine-digit ZIP code match â€“ if the other fraud services raise no suspicions, you should process the transaction.
Y â€“ Match : Address and five-digit ZIP code match â€“ follow instructions above.
A â€“ Partial Match : Address matches but ZIP code does not â€“ a sign of a potential fraud. You may want to investigate further before making a decision.
Z â€“ Partial Match: ZIP code matches but address does not â€“ a sign of a potential fraud; follow instructions above.
N â€“ No Match : Neither address nor ZIP code match â€“ a strong sign of a fraud. You should take additional steps to investigate the transaction.
U â€“ Unavailable : The card issuer system is unavailable and the address cannot be verified. You need to make a decision whether to process the transaction without AVS or not.
R â€“ Retry : The card issuer system is unavailable â€“ you should try again later.
S â€“ No AVS Support :If the card issuer does not support AVS you will have to make a decision whether to process the transaction or not based on other criteria.
http://usa.visa.com/merchants/risk_mana … esent.html