Sam’s Club states the policy in six words: it does not ship online orders to Army Post Office or Fleet Post Office addresses “due to security precautions.”

The company does not say what the danger is. Its short explanation links customers to a U.S. Postal Service bulletin listing military-mail restrictions. It provides no fraud rate, no loss rate, no government order forbidding the shipments and no evidence that the addresses themselves are suspect.

That gap matters because an APO or FPO is not an improvised overseas mailbox. It is the address the United States assigns to service members, military families and other authorized personnel living abroad. USPS publishes the format. The address uses APO or FPO as the city, AA, AE or AP as the state, and a military ZIP code. Mailers pay domestic postage. USPS then transfers the package into the Defense Department’s postal network for the overseas leg.

The foreign country is deliberately left off the label so the parcel does not enter that country’s civilian mail system — and so the address does not advertise where a unit or ship is located.

These are real U.S. postal addresses. But they do not move exactly like a box going from Ohio to Florida. That difference is where a defensible business concern becomes a misleading security claim.

What “security” actually means

Private carriers generally cannot deliver directly into an APO or FPO. The final military-post-office leg belongs to USPS and the Military Postal Service. A retailer built around FedEx or UPS therefore has to add a USPS workflow, use a consolidator or decline the order.

Best Buy’s own supplier rules show that conflict in unusually plain terms. The company tells direct-fulfillment vendors that APO/FPO orders are not supported and must be canceled. The same document names FedEx as its primary parcel carrier and says vendors may not use an unapproved carrier.

The address is not defeating the system. The system was designed around a carrier that cannot complete the delivery.

That is an operational choice, not a finding that the customer is unsafe.

Pulsar, a gaming-hardware company, offers another version of the same explanation. Its support page invokes “security regulations,” then says its shipping partners include DHL and FedEx and require a physical address for proof of delivery and signatures. Again, the underlying issue is carrier access and delivery documentation. “Security” is the label placed over it.

The complications are real

Shipping to military addresses is not frictionless.

Most merchandise traveling to an overseas APO or FPO needs a computer-generated customs declaration with electronic data describing what is inside. The rule is enforced even though the sender pays domestic postage. Restrictions also vary by military ZIP code and destination. Batteries, aerosols, perishables, hazardous materials, oversized goods and certain electronics may be prohibited or require special handling.

Those rules justify blocking an ineligible product. They do not justify blocking a sweatshirt, a book or every other eligible item ordered by the same customer.

Delivery is also slower and less predictable. A 2019 USPS inspector-general audit said expected military-mail delivery could range from three days for some express mail to 30–45 days for other mail headed to the Far East. Because USPS, international transport providers and the Defense Department share responsibility, USPS did not measure performance from origin to final delivery in the same way it measured ordinary domestic mail.

The audit found delays, misrouting, damaged parcels and processing stages that lacked individual-piece scans. Those findings support a real argument about risk. A seller may face a longer refund window, weaker proof in a chargeback dispute and a more complicated damage claim.

But the audit did not find that APO/FPO customers were fraudulent. It found weaknesses in the institutions carrying their mail.

Dell’s published APO guidance makes that distinction better than most blanket policies. The company identifies USPS size limits, limited tracking and the lack of a Dell claim process as reasons it will not send certain servers or large Alienware desktops through military mail. Those are product and fulfillment constraints. They are specific enough to evaluate.

“Security precautions” is not.

The fraud claim has no public evidence behind it

There is a plausible reason military orders may make automated fraud systems nervous. The shopper may be online in Germany or Japan while entering the United States as the destination country. The city may be three letters. The state may be AE. There is no conventional street address. A rigid checkout form can interpret every correct field as an anomaly.

That still does not make the address fraudulent.

PayPal officially recognizes AA, AE and AP as U.S. military state codes. Stripe says USPS treats overseas military and diplomatic addresses as domestic mail before transferring them to the military. Stripe’s tax system also recognizes that state sales tax does not apply to those overseas military postal codes.

The payment and tax infrastructure can identify these addresses. If a retailer’s system cannot, that is a configuration decision.

No credible public dataset located for this reporting establishes that APO/FPO customers generate higher fraud or chargeback rates than comparable civilian customers. That does not prove the rates are identical. It means companies invoking security have not publicly supplied the evidence needed to make the claim.

They should.

Other retailers already do it

The BL:UF has seen one version of this failure corrected from the inside. In an earlier first-person account, a newly established military installation had a working address and was receiving mail, but Amazon's system did not recognize its ZIP code. After the problem reached Amazon's executive customer-relations team, the company updated the ZIP and orders began moving.

That episode does not prove every retailer can send every product to every military address. It proves something narrower and important: an address rejection can be a database and escalation failure, not a security judgment. A company with a path to a responsible human can correct the system. A company with only an automated denial leaves the customer trapped inside it.

Nike ships eligible orders by USPS Military Mail and tells customers to expect roughly 30–45 days. Target accepts APO, FPO and DPO destinations but excludes expedited delivery. DHL eCommerce has restored service coverage for military and diplomatic addresses. These companies do not pretend the complications disappear; they build rules around them.

Then, on July 8, Home Depot supplied the cleanest test yet.

The company announced that more than 20,000 products would become available for APO, FPO and DPO delivery through the Army & Air Force Exchange Service and Navy Exchange Service Command. USPS handles the delivery under military-mail requirements. Home Depot said the program would reach military communities at more than 750 overseas bases across more than 80 countries.

The program is narrower than opening Home Depot’s entire catalog to every military address. It uses the exchanges as an intermediary and screens the products that can move through the system. That is precisely the point: the problem can be managed without treating the address as illegitimate.

If Home Depot can put 20,000 products through the military postal network, “security” is no longer a sufficient explanation from a national retailer that will not send one.

What it would take to say yes

A retailer that already ships packages does not need to invent a military postal system. It needs to connect its checkout and warehouse to the one that already exists.

The minimum workable change looks like this:

1. Let the checkout accept the address. The country remains United States. The city field must accept APO, FPO or DPO; the state field must accept AA, AE or AP; and the address lines must preserve the customer’s UNIT, PSC, CMR and BOX information. The form should not demand a foreign city, province or telephone format. USPS’s current address API recognizes the military state codes, and Shopify publishes the same formatting rules for merchants.

2. Detect military mail before selecting a carrier. An AA, AE or AP address should trigger a separate fulfillment rule. It should not be sent into an ordinary rate-shopping process that asks FedEx or UPS for a direct-delivery service, receives no result and tells the customer the address is invalid.

3. Add a USPS label path. A large retailer can integrate directly with the USPS developer platform; its label APIs validate addresses, calculate postage, create labels and generate the electronic Shipping Services File required for package processing. Direct users need a USPS business account, USPS Ship enrollment and an Enterprise Payment Account. A retailer that does not want to build the integration can use an existing multicarrier platform. ShipStation, for example, already creates military and diplomatic labels and routes eligible services through USPS or an approved last-mile handoff.

4. Screen the product, not the customer. The catalog needs machine-readable flags for dangerous goods, perishables, batteries, size, weight and export-controlled merchandise. At checkout or before release from the warehouse, the system should compare those attributes with the current restrictions for the destination ZIP. USPS maintains a military-address restrictions lookup because the rules are not identical at every post. An ineligible aerosol can be removed from the cart without canceling the eligible shirts beside it.

5. Send the customs data electronically. The order record must supply a specific description, quantity, weight, value, country of origin and any required export classification for each item. The label provider then transmits the advance electronic data and produces the applicable customs declaration. This is the extra operational step that ordinary domestic parcels do not require; it is also a standard function of modern USPS label systems.

6. Give the warehouse a military-mail lane. Workers need a short packing and manifesting procedure: verify the address and recipient, use reinforced packaging, apply the integrated label and customs declaration, scan the parcel into the correct manifest and tender it to USPS or the company’s consolidator. The default system should enforce the general 70-pound and 130-inch combined length-and-girth ceilings, while recognizing that particular military ZIP codes can impose smaller limits.

7. Set honest service expectations. The checkout should suppress promises the military network cannot reliably meet. Customers can be shown an estimated range, told when tracking may pause after the domestic handoff and offered shipment insurance for higher-value merchandise. Customer-service software should wait for the military-mail delivery window before automatically refunding an “in transit” order.

8. Build a return path. Military-address returns need their own USPS or shipping-platform workflow; Shopify, for example, tells merchants that its native return-label function does not cover APO/FPO/DPO addresses and directs them to USPS or another shipping app. A workable policy can provide a USPS label, extend the return deadline to account for transit, or allow the customer to consolidate a return through a stateside forwarding address.

9. Fix the fraud and tax rules. The fraud engine should not treat APO, FPO, AA, AE or AP as an automatic decline, and it should not assume an overseas IP address makes a United States military shipping address contradictory. The company can keep its normal card, account and device checks while measuring military orders separately. Tax software should recognize the military ZIP instead of forcing the address into a fictional state.

None of that requires a national launch on day one. A retailer could begin with one fulfillment center, USPS Priority Mail, low-risk merchandise and a limited group of military ZIP codes. For 90 days, it could measure checkout conversion, postage and labor cost, delivery time, damage, returns, chargebacks and customer-service contacts against ordinary orders. Expand if the numbers work; narrow the catalog if a product class does not.

That pilot would replace “security precautions” with evidence.

The market they are turning away

The Defense Manpower Data Center counted 169,589 active-duty personnel permanently assigned to foreign countries in December 2025, along with 28,841 Defense Department civilian employees. Those figures exclude temporary-duty and contingency deployments, unknown locations, U.S. territories and many people serving aboard ships.

That is a core population of 198,430 adults before counting spouses.

The Defense Department reports that 47.6% of active-duty members are married. Not every spouse accompanies the service member overseas, and some couples are dual-military. A cautious estimate of 40,000 to 80,000 accompanying spouses produces approximately 238,000 to 278,000 identifiable adult consumers living abroad with the Defense Department.

There is no government dataset measuring their online purchases. A transparent benchmark, however, shows the scale.

The Census Bureau estimated U.S. retail ecommerce sales at $1.2337 trillion in 2025. Divided by the 2025 U.S. population, that is about $3,610 in ecommerce sales per resident. Applying that national benchmark to the overseas Defense population produces an addressable market of approximately $860 million to $1 billion a year.

That is not a claim that retailers collectively lose $1 billion. Some goods cannot be mailed. Some customers buy locally, shop at military exchanges, use forwarding services or have relatives resend packages. The calculation also leaves out contractors, diplomats, adult dependents, temporary deployments and purchases made for overseas personnel by people stateside.

It is a measure of scale: the population being rejected is not commercially trivial.

For a retailer capable of winning just one-half of 1% of that market, the opportunity is roughly $4.3 million to $5 million in annual gross sales. A 1% share is approximately $8.6 million to $10 million. Whether any particular company is forfeiting that amount depends on its product category, prices and competitors — numbers the companies have not disclosed.

They can calculate the real loss. It is the number of APO/FPO checkout attempts they reject, multiplied by the orders that would have converted, the average basket and the customer’s annual purchase frequency.

That data is sitting inside their checkout systems.

What the companies should answer

Retailers that block military addresses should be asked what “security” means in measurable terms.

Is it fraud? Publish the comparative chargeback rate.

Is it lost mail? Publish claims per 10,000 shipments and compare them with ordinary domestic packages.

Is it prohibited merchandise? Explain why the company blocks the customer instead of the product.

Is it customs paperwork? State the incremental cost per shipment.

Is it carrier access? Say plainly that the company chose a fulfillment network that does not support the military postal system.

And if the company has never accepted enough APO/FPO orders to calculate any of those rates, it should stop presenting an assumption as a security fact.

The bottom line

Military mail does carry additional rules, longer timelines and weaker end-to-end visibility. Companies are entitled to decide that supporting it costs more than they want to spend.

But they should name that decision honestly.

An APO or FPO is not a suspicious workaround. It is the official address the United States gives people it stations overseas. The military family did not choose a defective address. The retailer chose a system that rejects it — and, in many cases, sends the customer and the sale to someone else.

The Receipts