The retailer needs a slap round the head, so you can at least do that to start with – if they are not sending goods to the cardholders address they should at least be sending paperwork to cardholders address. When I need large orders sent to site most of my suppliers, unless I have a credit account with them won’t deliver unless I present myself in person with my card in advance, or arrange to pay on delivery. The others always send the invoice to my address and the goods to site
If the retailer who was being scammed doesn’t do that, tell us who they are are we can all order free stuff. Its not Screwfix is it? I’ve had a go at them for sending goods to site but putting the invoice in the box rather then posting it.