It doesn't matter how careful you are I guess. I never respond to those emails, but someone could have just as easily got the number from the card in person. All I know is, whoever ordered all that stuff on line has to have it sent somewhere, right? Let's hope the cops are waiting for them when their packages arrive...