akmac - 12:16 am on May 17, 2011 (gmt 0)
I'd call the issuing bank and ask them to call the card holder to verify that it was them who placed the order.
It's pretty common for AVS to not match-people relocate regularly and don't always update their info immediately.
Did they ask for express shipping? Any other red flags?