Originally Posted by
Globaliser
I'm sure that more could in theory be done. I agree with your impression that they seem to use a very limited set of information at the moment. But speculating for a moment, there might be serious resource implications if an authorisation request from a merchant (which is presumably what triggers the fraud alerts) had to include information such as proposed delivery address.
My impression is that some already do this, at least by way of post-code - often not for the delivery address but for the billing address, so that at least if someone just got hold of a card number/expiry without knowing the billing address they wouldn't be able to place an order. I've certainly had an order refused recently on my MasterCard where I mistakenly gave the wrong billing address - the retailer came back saying this was why the payment failed and when resubmitted with the correct one it went through. Some US petrol stations have something akin to this by way of asking for a ZIP code (which causes issues for non-US cards, although sometimes 00000/99999/90210 seem to work!).