Yes BCC's description of AVS is correct... Also they can screen out based on:
B Transaction was submitted without a billing address.
E AVS data provided is invalid or AVS is not allowed for the card type that was used.
R The AVS system was unavailable at the time of processing.
G The card issuing bank is of non-U.S. origin and does not support AVS.
U The address information for the cardholder is unavailable.
S The U.S. card issuing bank does not support AVS.
But, most providers don't screen for all of those, because they cause good cards to be declined.
Keep in mind they might still screen you based on Name, House Number and Zip Code. In other words if those 3 match they might have that as something to decline.
Also cards/transactions can be held for fraud for many reasons, such as:
Geographical IP address location checking
- IP Country Match
- IP Country Value
- IP in High Risk Country
- Distance between IP and billing location
- IP Region Value
- IP City Value
- IP Latitude/Longitude
- IP ISP/Organization Value
Proxy Detection
- Anonymous Proxy
- Open Proxy
- Transparent Proxy
E-mail Checks
- Free E-mail
- Known Carder E-mail
Issuing Bank BIN Number Checks
- BIN Country Match
- BIN Name Match
- BIN Phone Match
Address and Phone Number Checks
- Phone prefix location check
- High-risk shipping address
- Known ship forwarding company addresses
So in other words if you're in California but your card billing address says Rhode Island, that's one strike against you on the fraud. If you also use a known freely available email address, then that's two.
Keep in mind that Facebook might already have certain address numbers within your zip code flagged for review. I doubt they would go to that much trouble but I have no idea of the complexity of their system.
Best way to completely change it is:
- Different address (PMB maybe?)
- Different name
- Different credit card number
- Different zip code
- Different e-mail address
- Different IP address
- Erase all your cookies / cache
You'd be surprised but something as simple as a cookie CAN and WILL identify you as someone who was declined before. If you're super paranoid, log in on a clean box on a different internet connection. Also don't be stupid and go back to using a "contaminated" setup once you have gotten it to work. If they are tracking based on IP address then you need to get that changed.