What can billing information prove?¶

Billing information records the name, address or contact details supplied in connection with a payment or account.

Avoid this assumption: Billing details identify the person who made the payment.

The details may be taken from the card account, entered manually, copied from a saved profile or supplied falsely.

A correct billing address may help a payment pass verification, but it does not prove who entered it.

An offender may know the victim’s address. A family member or employee may use the same billing details legitimately.

Billing information can still help link payments, merchant accounts, devices, addresses and repeated transactions.

Preserve the exact name, address, email, phone number, account ID, timestamp and source of the information.

Ask whether the details came from the card issuer, merchant account, guest checkout or user entry.

Compare billing information with delivery details, account records, device data, communications and provider-held customer information.

A mismatch may be relevant, but it does not automatically prove fraud. People move, use business addresses or keep outdated account details.

A match is also not proof of identity or consent. It may only show that the supplied details were consistent with information already held in another system.

Where address verification was performed, obtain the result and ask what fields were compared.

When reporting, state that particular billing details were supplied or recorded rather than asserting that they identify the purchaser.

Operational takeaway¶

Use billing information as linking and verification evidence, but establish the actual user through account, device, authentication and delivery records.