It's not ethical to withhold this information. I'm sorry it makes it harder for your fraud departments but it's not ok to reject someone and not tell them why.
That's all there is to it. I've had this happen to me by banks before and it's shit because the customer has no recourse. They can't advocate for themselves.
This practice needs to change, industry-wide.