I used to be an assistant controller, so I am familiar with the CC schemes.
There are several types.
The first kind you just take the number. The problem with this is, it’s called a “not present.” What this means is if the charge is disputed, the company loses automatically. You have no recourse.
The second type requires you to verify the zip code and the EXACT name to the card. If the charge come back disputed you have a bit more room to fight the dispute. But it’s obvious you could charge this way if you found a bill, rather than the card
The third type verifies the EXACAT name, the zip code, and the CID (three or four digit number on the back of the card). This is the strongest verification they have. But it’s still a card not present.
Now you may ask why the levels? The levels are for cost. The higher the level the more the credit card company charges per transaction. So if you run a business and get one or two chargebacks a year, it won’t be worth the extra cost to get a third level verification. It’s cheaper to take the hit for one or two disputes than to pay the cost of the extra security.
Now what about the address, it’s kind of a trick question. The THIRD level verification REQUIRES that the seller takes down the address EXACATLY as it appears on the bill to be valid.
So while the third level verification doesn’t check the address, but in order to be covered in the event of a dispute that address HAS to match the address on the bill. If it doesn’t match and there is a dispute the credit card company can (but doesn’t have to) rule against the merchant for failing to get the correct information.
This is why unless you sign for a purchase, you will almost always win in a dispute. If you can’t produce that signature it’s tough luck for the merchant. This is why if you write “See ID” instead of signing the merchant will lose. When you report a card as lost or stolen, the first thing they ask is “Did you sign your name on the back of the card.” If the person says “no,” the credit card company is off the hook and the merchant bears the cost.
Of course if you fraud a merchant once, you’ll probably get away with it, but if you do it a lot, the credit card company will easily get wise.
But when you look at the cost of business, it often pays to take a hit. Like Walgreens doesn’t require a signature on a credit card less than $50.00. Why? Because the chargebacks aren’t enough to warrent the cost. It’s better to speed people through the lines and if someone disputes, just take the hit