My guess is what you are seeing are "cashless ATM" transactions which likely uses a corporate address for the MRB, which in many cases is not be the same as the actually dispensary address. The cashless ATM setup doesn't actually have an ATM on site, it's simply using the ATM withdrawal transaction to facilitate the debit from the customers account to be settled later to the dispensary's account.
As far as the network rules about addresses, you'd have to look in the NYCE operating rules. I'm fairly certain in my past life I've dealt with customers who bought things online or with big box merchants where they didn't recognize the address because it wasn't where they actually purchased the item, so I don't think that's the case, but if you're concerned, verify that with NYCE.
Maybe sharing a list of these known addresses to your call center will help them provide a memory jog to the card holder before a dispute is filed?