1

We've been getting too many errors on our shop with the Sagepay error 2001 (Authorisation was Rejected by the vendor rule-base), failing when the address given by the user doesn't 100% match the address held by the bank. I think the issues has often been apartment/flat numbers and addresses with both house names and numbers.

We're thinking of taking address verification checks off our Sagepay rule-base and just using CV2 checks (95% of our orders are from the UK) but that increases our likelihood of frauduelent transactions.

Integrating PAF or a similar database with our site would help the end user with not having to enter an address. But would it help with bank address validation on Sagepay?

Mark Morton
  • 111
  • 4
  • With our card payment provider, we get a choice of None, Medium or High for address verification. I take it Sagepay doesn't offer a Medium option? – Jack Deeth Dec 13 '16 at 11:14
  • When checking AVS, it's the numerics from the address that should be passed (ie flat number as well as street number). House names shouldn't affect things, unless customers are omitting their actual number in preference of a name. Basically - yes. AVS is full of quirks that rely on customers to input correct information. Using PAF may help, but still - I would use the AVS result as advisory, and rely more on the CV2 result – PaulG Dec 13 '16 at 11:54

1 Answers1

1

We use accept CV2 only and have never had a fraudulent transaction in 10 years although we are a low risk business. What SagePay don't tell you is that usually the 'Rejected by Vendor Rules' message is because the Customer has selected the wrong card type (for example they have clicked that they are using a Visa Debit but are trying to enter the number from their Visa Credit card). We are calling Customers multiple times every day to get them to pay over the phone as they are bewildered why their Card are not going through and eventually give up. It's idiotic that the Customer has to select the card type, it should pick it up automatically like 99% of the other card processors. SagePay are aware of it but don't seem bothered about it from the discussions I have had with them.