Address Verification
Business addresses reveal critical risk patterns and verification challenges.
Why Address Verification Matters
A business's physical address is a fundamental data point in verification: it confirms where the business operates, provides consistency across data sources, and reveals risk signals through address type and validation status.
Address verification serves multiple purposes: validating deliverability through USPS, identifying high-risk address types (mail forwarding services, virtual offices, PO boxes), and ensuring consistency across Secretary of State records, websites, and applications. Different address types carry different risk profiles, and inconsistencies signal either data errors or potential fraud.
USPS Address Types
The United States Postal Service validates and classifies addresses into standardized types. Understanding these classifications helps assess address legitimacy and business operations.
STREET
Standard street addresses for homes, businesses, and commercial buildings.
- Most common address type for established businesses
- Includes suite numbers for multi-tenant buildings
- USPS confirms deliverability and standardizes formatting
Example: 123 Main St Ste 200, New York, NY 10001
HIGH_RISE
Addresses in high-rise buildings with specific unit identifiers.
- Multi-story buildings with numerous units
- Common for businesses in urban commercial buildings
- Includes apartment buildings, office towers, condominiums
Example: 456 Park Ave Apt 15B, New York, NY 10022
FIRM
Business-specific addresses where mail is delivered to a firm name rather than an individual.
- Used for large corporations, government offices, or institutions
- Often includes department or division information
- Indicates established, known entity to USPS
Example: Acme Corporation, 789 Corporate Blvd, Chicago, IL 60601
RURAL_ROUTE
Addresses in rural areas using route and box numbers instead of street addresses.
- Common in less populated areas without traditional street addresses
- Legitimate for businesses operating in rural regions
- Format: RR [route number] Box [box number]
Example: RR 2 Box 45, Springfield, IL 62701
Risk consideration: Rural route addresses for businesses claiming urban operations or high transaction volumes warrant verification.
POST_OFFICE (PO Box)
Post Office boxes for mail receipt without physical address disclosure.
- Cannot be used as primary business address for most state registrations
- No physical location for business operations
- Higher fraud correlation - often indicates no fixed commercial premises
Example: PO Box 1234, San Francisco, CA 94102
Risk consideration: PO Boxes as sole addresses indicate businesses hiding physical location or lacking fixed operations. Legitimate uses include supplemental mailing addresses or privacy for home-based businesses.
GENERAL_DELIVERY
Mail service for recipients without fixed addresses, held at post office for pickup.
- Temporary mail solution for transient situations
- Extremely rare for legitimate business operations
- High fraud risk - indicates no stable address
Example: General Delivery, Austin, TX 78701
Risk consideration: Businesses using general delivery addresses should be flagged for heightened scrutiny or declined.
CMRA (Commercial Mail Receiving Agency)
Mail forwarding services that provide street addresses functioning as mailboxes, businesses appear to have physical locations but only receive mail there.
Common providers:
- UPS Store
- FedEx Office
- PostNet, Pak Mail
- Independent mail forwarding services
Risk considerations:
- Business has no physical presence at that address (only a mailbox)
- Higher fraud correlation: used to obscure true location
- Legitimate use cases: Remote businesses, home-based businesses maintaining professional address
Why it matters:
CMRAs aren't inherently fraudulent, but indicate absence of physical operations at that location. Combined with other red flags (new business, thin file, high credit request), CMRA addresses warrant additional scrutiny.
Virtual Offices
Shared office space providers (Regus, WeWork, IWG) offering businesses professional addresses and occasional workspace access without full-time physical presence.
Risk considerations:
- Mixed signal: legitimate for startups, consultants, remote-first companies
- Also used by shell companies to project legitimacy
- Evaluation depends on business type and supporting indicators
When to investigate:
- Manufacturing or retail business using virtual office (inconsistent with claimed operations)
- Dozens of unrelated businesses at same suite
- Virtual office combined with other fraud indicators
Residential vs Commercial (RDI)
USPS classifies addresses as residential or commercial, indicating whether the location is primarily a home or business establishment.
Residential addresses:
- Homes, apartments, condominiums
- Common for home-based businesses, sole proprietors, freelancers
- USPS designates with residential delivery indicator (RDI)
Commercial addresses:
- Office buildings, retail spaces, industrial facilities
- Expected for businesses claiming significant operations
- USPS designates as commercial delivery
Risk assessment:
- Low risk: Consulting firm at residential address (appropriate for business model)
- High risk: Restaurant claiming to operate from apartment, manufacturing company at residential address
Why it matters:
Residential addresses aren't fraudulent, but should align with stated business type and scale. A business description inconsistent with home-based operations raises questions about legitimacy or accurate representation.
Address Consistency
Verifying that addresses match across multiple sources detects fraud and ensures accurate record-keeping.
Sources to cross-reference:
- Secretary of State business registration
- Business website contact information
- Google Business Profile
- Social media profiles
- Application submitted address
Why consistency matters:
Legitimate businesses maintain consistent address information. Inconsistencies signal:
- Data entry errors requiring correction
- Recent moves not updated across all platforms
- Intentional misrepresentation (fraud)
- Shell companies with minimal operational footprint
Common issues:
- Application address differs from Secretary of State records
- Website lists different city than business registration
Investigation triggers:
- Major inconsistencies (different cities or states) require explanation
- Pattern of inconsistencies across multiple sources indicates higher risk
Address Changes
Businesses changing addresses frequently or recently can signal instability, fraud patterns, or business evolution.
Context matters:
- Recent change (< 90 days): New business, recent move, or relocation
- Multiple changes in short period: Business instability, financial distress, or fraud cycling
- Address change during application: Verify reason and update verification accordingly
Why it matters:
- Established businesses don't frequently change locations without operational reasons
- Fraud operations may cycle through addresses to avoid detection
- Recent moves may indicate financial problems
Risk indicators:
- Three or more address changes in one year
- Moving from commercial to residential address (potential downsizing or fraud)
- Change immediately before applying for credit
Best Practices
- Validate deliverability - Confirm USPS validation before proceeding with verification
- Identify address type - Different types (CMRA, virtual office, PO Box, residential) carry different risk
- Cross-reference sources - Check Secretary of State, website, and public records for consistency
- Consider business context - Home-based consultant differs from home-based manufacturer
- Investigate inconsistencies - Determine if mismatches are errors or fraud indicators
- Monitor for changes - Ongoing monitoring catches address updates signaling potential risk
Baselayer Address Verification: Baselayer validates addresses through USPS, identifies address types and high-risk classifications (CMRA, virtual offices, PO Boxes), cross-references addresses across Secretary of State records, websites, and public data sources, and flags inconsistencies and recent changes - providing comprehensive address intelligence as part of business verification.
Updated about 1 month ago
