If a bank, a payment platform or a checkout page flags your address as a commercial mail receiving agency (CMRA), its address check matched your address to a list of mail-receiving locations. The flag is a lookup result, and each company applies its own rule to it.
We read the U.S. Postal Service (USPS) pages on CMRAs and address data, and the USPS guide to street-addressed post office boxes. We also read the field definitions of one address-validation vendor and the address rules of a federal bank regulation, Stripe, Mercury and the IRS. Below is what each text says. Where we interpret a text, we say so.
What it means when your address is flagged as a CMRA
A CMRA is a mail center. The USPS FAQ gives the short definition: "A Commercial Mail Receiving Agency (CMRA) is a private business that rents Private Mail Boxes (PMBs) to customers and accepts mail from the United States Postal Service for distribution to their customers."
The Domestic Mail Manual (DMM), section 508.1.8.1, reaches further. The section says office business centers (OBCs) "are considered CMRAs for Postal Service purposes" and treats reshipping services the same way. In our reading, a virtual mailbox company, a mailbox store and an office business center can all fit the term.
The USPS CMRA FAQ and DPV page don't use the word "flag." We searched the USPS CMRA FAQ and the USPS Delivery Point Validation page for "flag" and found zero matches. Software vendors and platforms use the word. In their tools, a flag means the address matched a mail-receiving record. Smarty, one address-validation company, words a match as "Address is associated with a valid CMRA." A match doesn't mark the address as invalid.
Where the flag comes from: the USPS DPV CMRA table
Delivery Point Validation (DPV) is a USPS data product for address software. DPV checks whether a ZIP+4 address is a known delivery point in the USPS file. The DPV page also sets a limit: "The DPV ® Product does not append any missing data or correct any address elements." In our reading, DPV reports on an address and leaves the address unchanged.
DPV data includes a CMRA table. An archived notice on the same DPV page announces that USPS would add post office box records to that table, starting with a February monthly release. The archive dates the notice January 17, 2012. The added records are Post Office Box Street Addresses (PBSA). A PBSA is a USPS post office box written in street form.
A match against the CMRA table therefore has two possible meanings. The USPS PBSA Guide (January 2017, version 1.1) describes a second table for telling them apart: "This table allows the user to make a positive determination whether an address matching to the CMRA table is a CMRA or a PBSA." The guide says USPS began sending that PBSA table to software providers with the August 2012 DPV product.
The guide lists another method that needs two signals at once: "Where both the CMRA and the P.O. Box Throwback indicator are present, the input address is a PBSA address. Input addresses that return only one of the indicators do not indicate that the address is a PBSA address." We counted the five identification tools on pages 2 and 3 of the guide. Three of the five use the CMRA table. The guide also confirms that PBSA addresses pass the USPS validation process as valid mailing addresses.
We showed how a checkout form uses the same table in Is your mailing address a PO Box? The difference between a USPS box and a private mailbox is in virtual mailbox vs PO Box.
What the flag looks like inside one address tool
Smarty's CMRA page describes its role: "Any address processed using Smarty is closely inspected. If it’s found to correspond to a CMRA, we flag it so that you can handle the address according to the needs of your business." The field is called dpv_cmra. Smarty's US Street API documentation lists three values.
| dpv_cmra value | Smarty's definition |
|---|---|
| Y | "Address is associated with a valid CMRA." |
| N | "Address is not associated with a valid CMRA." |
| Blank | "Address was not submitted for CMRA verification." |
Smarty names two reasons customers want the field: "fraud prevention and arranging delivery." The same page adds: "If you need to know where somebody lives, a CMRA box won’t help you."
Can a different provider or plan remove the flag?
In our reading of Smarty's documentation, a plan upgrade doesn't change what the check looks at. Smarty's examples show the check confirms the building. Smarty's footnote code RR means "Confirmed address with private mailbox (PMB) info." Its example is 3214 N University Ave #409 Provo UT. Code R1 means "Confirmed address without private mailbox (PMB) info." Its example is 3214 N University Ave Provo UT. Both examples use the same building.
The box number gets no check at all. Smarty's pmb_number field holds "The private mailbox number assigned by a CMRA; this value is not verified by Smarty."
Our reading is limited to Smarty's documentation. In that documentation, the building decides the match, and neither the box number nor the plan level plays a part. A provider at a different building is a different lookup, so the result may differ. We found no USPS text that says every CMRA appears in the table.
Checkers also don't share one list. Stripe's physical presence FAQ says Stripe screens business addresses "against a proprietary list" of addresses tied to mailbox and virtual address services. A Stripe result and a Smarty result can come from different data.
Who checks the flag, and what each one does with it
The flag carries no rule of its own, so the rule comes from whoever reads it. The table shows what each text we read says.
| Who reads the address | What the text says | What a flagged address means there |
|---|---|---|
| Smarty, address software | Flags a match "so that you can handle the address according to the needs of your business" | The vendor reports, and its customer decides |
| Stripe, physical presence FAQ | The rule "will only apply to US accounts with Issuing, Treasury, or Opal capabilities" | Flagged accounts "will still be able to use Stripe for payment processing and other products" |
| Mercury, company address requirements | The physical address rule names "commercial mail receiving agency" among addresses Mercury doesn't accept | Mercury's legal address article bars P.O. boxes and virtual offices or workspaces. The mailing address must be a physical address, contain no special characters, and be deliverable by USPS |
| Banks, 31 CFR 1020.220 | Asks a company for "a principal place of business, local office, or other physical location" | The rule doesn't name CMRAs, and each bank's checks are risk-based |
| IRS, Form SS-4 instructions | Lines 4a–4b: "Enter the mailing address for the entity's correspondence." | The P.O. box bar sits only on the street address lines, 5a–5b |
Mercury ties the legal address to a check of the physical address. Mercury's legal address article says Mercury "cannot accept P.O. Box addresses or virtual offices/workspaces as a company's legal address." The physical address section of Mercury's company address page says: "We may ask you to verify this if your legal address is a P.O. box, virtual address, mail center, …" For the physical address, the page says "We may also request documentation to verify your address." Mercury's own blog says "many traditional banks and some online banks will flag or reject" known CMRA addresses. We compared Mercury's three address fields in can you use a virtual address for Mercury.
The bank rule asks an individual for "a residential or business street address." We searched the eCFR text of 31 CFR 1020.220 for "CMRA," "commercial mail receiving" and "mailbox." Each search returned zero matches. The rule makes identity checks risk-based: "The CIP must include risk-based procedures for verifying the identity of each customer to the extent reasonable and practicable." CIP means customer identification program. Banks can differ because of that sentence. We traced the bank rule in opening a US business bank account without a physical address.
Stripe's developer page on address validation explains the goal of its check: "These new validations focus on addresses that might be technically valid but don't represent a genuine physical business presence." Stripe's error message and appeal steps are in will Stripe accept a virtual address. PayPal's rules are in will PayPal accept a virtual address.
What to do after a bank or platform flags your address
A flag starts a review of the company's rule. At Stripe, for example, a flagged account keeps payment processing. Work through these steps in order.
- Find the company's own address rule. Look for the help page that names the field you filled in. Stripe and Mercury each publish one.
- Check which field the flag hit. A mailing address field and a physical address field follow different rules at Mercury. Our post on business mailing address vs business address explains the split.
- Use the company's review path if you think the flag is wrong. Stripe's FAQ says: "If you believe an address was flagged in error, you will be able submit an appeal with supporting documents." Existing Stripe users have 30 days to update the address or win an appeal before losing Issuing, Treasury or Opal.
- Give a physical location where the field asks for one. A format change doesn't turn a mailbox into a place of business.
Why removing the PMB number makes the problem worse
Some people try to hide the box by leaving out the box number. USPS rules point the other way. DMM 508.1.8.3 requires a CMRA address to carry "PMB" (private mailbox) or "#" with the box number. USPS Publication 28, section 285, adds: "Use of any other identifier is prohibited."
Mail without the box number can come back to the sender. The DMM names the endorsement for that mail: "Undeliverable as Addressed, Missing PMB or # Sign." The DMM also forbids merging the building's suite number with the box number. The address formats are in Is your mailing address a PO Box?
Removing the box may not change the check either. Smarty's R1 example confirms the building with no box number at all. Your relationship with the mail center is also on record with USPS. DMM 508.1.8.3 says: "The CMRA must enter the information provided on each PS Form 1583 and upload a clear and legible copy of each identification document into the USPS CMRA Customer Registration Database (CRD)." Our post on Form 1583 rejections covers that form.
How to check whether an address is a CMRA before you use it
Start with the address itself. A box number written as "PMB" or "#" at a mail center is a CMRA address under the DMM format rule. Ask the provider directly if the address shows neither.
Address software can tell you more. Tools that read DPV data, such as Smarty's US Street API, return the dpv_cmra value for an address. We didn't find a public USPS list of CMRAs on the DPV page, the DMM or the USPS FAQ. The DPV page describes DPV as a licensed product for makers of address software.
After you start using a CMRA address, delivery problems go to the mail center. The USPS FAQ says: "Contact the CMRA directly (not the Postal Service™) to resolve any delivery issues." The duties a mail center owes USPS are in what a CMRA is.
This post explains USPS rules, a federal bank regulation, IRS instructions and published company policies. The post isn't legal or financial advice. Confirm how a rule applies to you with the company or a professional.
How an Auteur address fits
We sell virtual mailboxes, so this is the seller's view. Auteur is in pre-launch, and your exact street address is assigned the day your city opens. Our addresses use a PMB or # box number at a commercial street address. Expect address software to identify an Auteur address as a CMRA, the same as any mailbox service. We can't remove a flag, and we don't say any bank, platform or agency will accept our address.
An Auteur address belongs in fields that ask for a mailing address. Mercury's page rules out a mail center address for the company physical address. Under Stripe's FAQ, an account whose business address is flagged loses Issuing, Treasury and Opal unless it updates the address or wins an appeal.
The Virtual Business Address receives mail in a business or trade name. Choose it if the flagged account is in the name of an LLC, a corporation or a DBA (doing business as) name. The Virtual Mailing Address is for personal mail, in individual names only. Choose it only if all your mail comes in your own name.
Both plans photograph the envelope of every piece, and we open and scan only when you ask, for one flat fee per piece. Henry, our AI assistant, explains each letter you ask us to open. USPS Form 1583 is required before any provider can receive mail for you. Pricing comes by email with the next steps, and our fees and limits are in our fair use policy.
If your account is in a business name, get your Virtual Business Address. Ordering is free, there's no card, and nothing is charged today. For mail in your own name only, the Virtual Mailing Address is the plan to choose.
FAQ
Is a UPS Store mailbox a CMRA?
In the address documentation we read, a UPS Store mailbox counts as a CMRA. Smarty's dpv_cmra definition names "the UPS Store and Mailboxes Etc." as examples. The term covers the store's mailbox service.
Why is my address showing up as a business address?
A residential or business label usually comes from a different data field. Smarty lists that field as rdi, "Residential delivery indicator (residential or commercial)", separate from dpv_cmra. We explain that label in is a virtual mailbox address residential or commercial.
Is it illegal to use a CMRA address?
None of the texts we read treat using a CMRA address as unlawful. USPS rules set the address format and the Form 1583 paperwork for mail centers. Banks and platforms then decide which of their fields accept a CMRA address.
Will the IRS accept a CMRA address?
The IRS texts we read don't answer that directly. The Form SS-4 instructions call lines 4a–4b "the mailing address for the entity's correspondence." The instructions bar a P.O. box only on the street address lines, 5a–5b. We searched the instructions for "CMRA," "PMB" and "private mailbox" and found zero matches. Our post on which address an EIN application can use covers the IRS address lines in more detail.
Bottom line
A CMRA flag means an address check matched your address to a list of mail-receiving locations. The USPS DPV CMRA table also holds street-addressed USPS boxes, and checkers like Stripe use their own lists. In Smarty's documentation, the building decides the match, and the box number isn't verified. Each company sets its own rule for a flagged address. Read that rule, check which field it applies to, and appeal if the flag is wrong. Keep the PMB or # on the address, because USPS rules require it.
