Address Verification: Why "123 Collins St" Isn't Good Enough

The address on a supplier invoice is one of the most revealing data points in the document — not because a legitimate business always has a prestigious address, but because the relationship between a supplier's claimed address and their registered records tells you something about whether they are what they claim to be.

Phantom suppliers almost always have an address. The question is whether that address is consistent with the nature of the business, the registered records, and what your own records show. When these three things conflict, the conflict is worth understanding before a payment is approved.

Three Types of Address Mismatch and What They Mean

Type 1: The address you have does not match the ABR or ASIC registered address.

This is the most straightforward mismatch. The address on the invoice (or in your supplier master data) differs from the address the entity registered with the ATO or ASIC. This happens legitimately when a business moves and does not update its registered address — which is common. But it also happens in fraud when the invoice address is a controlled location (a residential address, a mail drop, a colleague's office) while the registered address is a real business the fraudster is impersonating or using as a reference point.

The check: Gumshoe compares the address you supply against the ABR and ASIC registered address for the entity. A mismatch generates a WARN; significant discrepancy generates a FAIL.

Type 2: The address exists but is registered to a completely different entity.

This pattern appears in fraud where the attacker registers an ABN using a real commercial address — a serviced office, a shared workspace, a well-known business address — but the ABR record for that address is associated with a different entity. When Gumshoe's YellowPages cross-reference finds a listing at the same address, but under a different business name, the discrepancy surfaces as a conflict.

The check: Gumshoe's YP (Yellow Pages) cross-reference compares name, address, and phone number against public directory listings. A business that appears in YP at a different address than its ABR record, or whose address appears in YP under a different name, is flagged.

Type 3: The state or region on the invoice does not match the entity's registered state.

An entity registered in Queensland providing services billed from a Victorian address, with a Victorian phone number, but with no Victorian ABR registration — this inconsistency appears in supply chain fraud and in businesses that have expanded without updating their records. The mismatch is not conclusive, but it warrants a question before payment.

The check: Address state is compared against the entity's registered ABR state. Street View classification (if enabled) assesses whether the address geocodes to a commercial or residential location.

What the Street View Classification Adds

Gumshoe's Street View (SV) tile takes address verification a step further by geocoding the supplier address and using AI image classification to determine whether the location is commercial, residential, or vacant.

This catches the most basic version of residential-address fraud: a supplier claiming to operate from a commercial address that is, in satellite or street-level imagery, clearly a residential property, an empty lot, or a building that does not match the claimed business type.

A building contractor whose invoice address geocodes to a suburban house is not definitively fraudulent — many sole-trader builders work from home. But combined with a name mismatch, a recently registered domain, and no YP listing, the address classification adds weight to a risk picture that warrants a call before payment.

How to Use Address Verification in Your Process

The address check works best when you supply the address you actually have on file for the supplier — not the address on the ABR. If the two differ, that is the signal. If you only have an ABN, Gumshoe checks the address against ABR and ASIC records automatically, but the most informative check is when you supply the invoice address and cross-reference it against the registered record.

• New supplier onboarding: Enter the address from the supplier's letterhead or invoice into the address field before running verification. The cross-reference runs automatically.
• Bank detail change: If a supplier requests a payment account change and the contact details have also changed, re-verify the address with the new contact details supplied. Address changes alongside bank detail changes are a combined risk pattern.
• Annual re-verification: Supply the address from your supplier master data. If it no longer matches the ABR record, the supplier may have moved or restructured without informing you.

The address check is not a standalone verification. It is most informative in combination with ABN status, domain registration, web presence, and a phone call. A supplier that fails three of these checks simultaneously is in a different risk category from one that has a minor address discrepancy and passes everything else.

Include the address when you run your next verification. What you supply and what the registers say should be the same. When they are not, you want to know before the payment runs.

Uncommon Insights

Uncommon Insight 1: ATO's 'NAT 5792' ruling, which deals with the GST implications of incorrect ABN information, highlights the importance of verifying a supplier's ABN against their registered address. In cases where the address on the invoice does not match the ABR or ASIC registered address, it may be considered a 'reckless disregard' of the supplier's ABN status, potentially leading to penalties under section 286-75 of Schedule 1 to the Taxation Administration Act 1953. This is particularly relevant for CFOs and accountants, as they may be held liable for any resulting penalties.

Uncommon Insight 2: ASIC's 'REG 7.6.02' requires companies to notify ASIC of any changes to their registered office address within 28 days. However, many companies fail to comply with this requirement, leading to discrepancies between their registered address and the address on invoices. Gumshoe's address verification process can help identify such discrepancies, which may indicate a higher risk of fraud or non-compliance. In particular, section 1308 of the Corporations Act 2001 requires ASIC to maintain a register of companies, including their registered office address, making it a critical data point for verification.

Uncommon Insight 3: The ATO's 'PS LA 2008/6' practice statement highlights the importance of verifying a supplier's identity and ABN status to prevent 'identity theft' and 'false invoicing'. By cross-checking the address on the invoice against ABR and ASIC records, as well as Yellow Pages listings, Gumshoe's address verification process can help prevent these types of fraud. Furthermore, section 8L of the Taxation Administration Act 1953 requires the Commissioner to ensure that ABN information is accurate and up-to-date, making address verification a critical component of ABN verification.

Uncommon Insight 4: Geocoding and satellite/street-level imagery analysis can reveal additional insights about a supplier's address, such as whether it is a residential or commercial property. This information can be particularly useful in identifying 'phantom suppliers' that use residential addresses or virtual offices to invoice for goods or services. By analyzing the 'place type classification' of the address, Gumshoe's address verification process can help identify potential red flags, such as a supplier invoicing from a residential address in a suburb with no commercial activity.