# 17 C.F.R. § 248.202 (2026): Duties of card issuers regarding changes of address

> Federal · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/CFR_T17_P248_S248_202

## Section

- **Citation:** 17 C.F.R. § 248.202 (2026)
- **Heading:** Duties of card issuers regarding changes of address
- **Jurisdiction:** Federal
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** Title 17 CFR: Commodity and Securities Exchanges / Chapter II: SECURITIES AND EXCHANGE COMMISSION / Part 248: REGULATIONS S-P, S-AM, AND S-ID / Subpart C: Regulation S-ID: Identity Theft Red Flags / § 248.202: § 248.202   Duties of card issuers regarding changes of address.

## Text

(a)
Scope.
This section applies to a person described in § 248.201(a) that issues a credit or debit card (card issuer).
(b)
Definitions.
For purposes of this section:
(1)
Cardholder
means a consumer who has been issued a
credit card
or
debit card
as defined in 15 U.S.C. 1681a(r).
(2)
Clear and conspicuous
means reasonably understandable and designed to call attention to the nature and significance of the information presented.
(3) Other terms not defined in this subpart have the same meaning as in the Fair Credit Reporting Act (15 U.S.C. 1681
et seq.
).
(c)
Address validation requirements.
A card issuer must establish and implement reasonable written policies and procedures to assess the validity of a change of address if it receives notification of a change of address for a consumer's debit or credit card account and, within a short period of time afterwards (during at least the first 30 days after it receives such notification), the card issuer receives a request for an additional or replacement card for the same account. Under these circumstances, the card issuer may not issue an additional or replacement card, until, in accordance with its reasonable policies and procedures and for the purpose of assessing the validity of the change of address, the card issuer:
(1)(i) Notifies the cardholder of the request:
(A) At the cardholder's former address; or
(B) By any other means of communication that the card issuer and the cardholder have previously agreed to use; and
(ii) Provides to the cardholder a reasonable means of promptly reporting incorrect address changes; or
(2) Otherwise assesses the validity of the change of address in accordance with the policies and procedures the card issuer has established pursuant to § 248.201.
former address; or
(B) By any other means of communication that the card issuer and the cardholder have previously agreed to use; and
(ii) Provides to the cardholder a reasonable means of promptly reporting incorrect address changes; or
(2) Otherwise assesses the validity of the change of address in accordance with the policies and procedures the card issuer has established pursuant to § 248.201.
(d)
Alternative timing of address validation.
A card issuer may satisfy the requirements of paragraph (c) of this section if it validates an address pursuant to the methods in paragraph (c)(1) or (c)(2) of this section when it receives an address change notification, before it receives a request for an additional or replacement card.
(e)
Form of notice.
Any written or electronic notice that the card issuer provides under this paragraph must be clear and conspicuous and be provided separately from its regular correspondence with the cardholder.

## Nearby sections

- [17 C.F.R. § 248.201 (2026) § 248.201   Duties regarding the detection, prevention, and mitigation of identity theft.](https://www.frixlaw.com/law-library/statutes/CFR_T17_P248_S248_201.md)
- [17 C.F.R. § 248.202 (2026) § 248.202   Duties of card issuers regarding changes of address.](https://www.frixlaw.com/law-library/statutes/CFR_T17_P248_S248_202.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/CFR_T17_P248_S248_202. Check the current official text before relying on it. Not legal advice.