u/Niro5

Hey, this is a weird one, or maybe not. I tried to buy a toy for my kid and I guess the website was fake because someone has my email, credit card and home address now.

The next morning I got charges from NordVpn and TMates, an online pharmacy for Ozempic. I reported the charges and cancelled the card within minutes.

For some reason though, I am getting an Ozempic shipment in the mail tomorrow. Why would someone steal my card then ship something to me? I don't want to contact Tmates because I've never heard of them and don't want to unintentionally give them more information. If I see the Fedex guy tomorrow Ill refuse the shipment, but is there anything else I should do?