Hi Stripe folk, have a bit of weird situation surrounding Zip/Postal code validation. For background context here's what happened. We have a client that accepted a charge on their connect account. A buyer reported that it was asking them to input their zip code. They tried entering their Australian postal code but couldn't do so since the element form required 5 digits (this is because their card is US registered).
That being said they entered a fake US Zip code (90210). The charge went through successfully meaning that Stripe isn't correctly validating postal code since its considered to pass the zip check.
So here's something interesting. If you use the the test Asia-Pacific (Australian) card - 4000000360000006 and enter it for a USD transacting listing. You'll find that the zip code isn't required.
Well that makes sense after all the docs do state: ". However, street address verification is commonly supported for cards issued in the United States, Canada, and the United Kingdom." - https://stripe.com/docs/disputes/prevention#avs-check
Still that doesn't explain the fact that if you are required to enter a postal code you could essentially enter a fake postal code/zip code and a charge will consider the check as "passed" :P