Is there any documentation for this process? Our non-profit had to shut down our Stripe-based donation page because it was being used by credit card thieves to validate stolen credit cards. Stripe told us addresses are only validated when a charge is executed, meaning we would then have to issue a refund if address validation failed (and eat the transaction cost).
