Hacker News new | ask | show | jobs
by matthewarkin 2344 days ago
None of the major card networks except for American Express validate cardholder name. The Address Verification Service (AVS) also only validates numeric values (so if your address is 123 Main Street, 123 Maple Ave will return a matching response)
3 comments

Having worked around payments, I can guarantee you that card networks do check the Card Holder name. Better yet, they can match against first name, last name and middle name to adjust the risk rating of individual transactions.

Albeit, this is rarely used to block payments, because if they stopped payments when customers didn't put their middle name the exact way it's written on their card, nobody would be able to pay online.

It’s up to the merchant to decide. You can ask for as little as card number and expiry. All up to the merchant based on how they configure their payment processor
There is no error code that denotes invalid name. Sure the banks gateway fraud detection can decline auth(most don’t), but there would be no way to communicate back to the merchant that the customers needs to check the spelling of the name. I’ve also never seen it when I ran technology at a e-commerce startup that did millions of transactions of month.
I'm not so sure. I have a credit card under a completely different name (by accident).
I think the claim is that credit card processors don't validate names at payment time. Back before KYC became a thing you could sign up for a credit card with whatever name you preferred. I think it's a bit more strict these days.
Ah, well it was only a few years ago.
That feature is a configurable option (at wildly variable strengths) that is set up by the merchant when they are setting up their payment gateway. All the CC processors I have worked with provide these varying levels of Name/Address strictness.
Was always wondering about that, only occasionally misspelling a letter here or there to see if a transaction would get approved. Can anyone corroborate?
The crazy shit that happens when an address is entirely correct would make me hesitate before adding errors intentionally.