AVS and CVV results show up on Shopify orders, and it is easy to misread them. This guide explains what each check compares, where the result appears, and what a failed check does and does not tell you.
What each check compares
Both checks are run by the bank that issued the card, not by your store. AVS (Address Verification System) compares the numeric part of the customer's billing address and their ZIP or postal code with what the card issuer has on file. CVV is the 3 or 4 digit number on the card itself.
- AVS: Billing street number and postal code, checked against the issuer's records
- CVV: The security code printed on the card
- Why CVV matters: Card companies prohibit storing it, so a correct code suggests the buyer has the card in hand
Where you see the result
Shopify's fraud analysis lists AVS and CVV results as indicators on the order, next to signals such as location, device and network activity, and attempts with more than one card. Shopify states that individual indicators do not represent the order's overall risk level. The guidance on the order follows the overall recommendation.
- Find it: Open the order and look at the Order risk section
- Read it as: One signal among several, not a verdict
When there is no result
A missing result is not the same as a pass. Shopify notes that not all banks support AVS and CVV checks. When a bank does not support a check, the order is still processed and the check is not shown as a risk indicator.
- Unsupported bank: Order goes through, no indicator shown
- Saved cards: Payments with saved card details, such as Shop Pay, are processed without CVV verification
- AVS scope: It only looks at the billing address, so it says nothing about where the order ships
Declining failed checks automatically
Shopify Payments has two settings: "Decline charges that fail AVS postal code verification" and "Decline charges that fail CVV verification". They sit under Settings, Payments, Manage, in the "Reduce credit and debit card fraud" area. To change them yourself you turn off "Use automated settings".
| Choice | Trade-off |
|---|---|
| Leave automated settings on | Shopify applies its recommended settings |
| Decline AVS failures | Shopify warns you might see more failed transactions |
| Decline CVV failures | Any attempt that fails is declined and no order is placed |
What to do with a failed check
Treat a failure as a reason to look closer, not as proof of fraud. A customer who has moved recently or mistyped a postal code can fail AVS. For physical goods shipped to the United States, the United Kingdom or Canada, Shopify suggests considering shipping only orders that pass AVS, or contacting the customer before shipping to an address that does not pass.
- ✅ Check the other indicators on the same order
- ✅ Contact the customer and confirm the details they used
- ❌ Do not cancel on one indicator alone
- ❌ Do not treat a missing result as a pass
For the wider picture, see how Shopify order risk levels work.
Doing this at scale
RiskClarity reviews each paid order and explains the risk in plain English, with the fraud signals behind it, then recommends allow, verify or hold. You decide with one click, and every decision is logged in an audit log you can export for chargeback disputes. See RiskClarity.