Additional to what you don't need further comments about: you can ask for billing address at payment time and then validate it with a fraud checking company like ReD to prevent them just making it up, so that a card registered to an organization will have to out itself. Or if it's registered to a "front" that's designed to look residential, flag that address as dirty after having been caught in a sting and then propagate the dirty flag to other cards that also point there.