Update:
My bank reversed the charges and cancelled my card, so I didn't think much about it until yesterday when I received a return to sender USPS mail package sent via Click N Ship listing my name and address as sender. It stated that it was sent to an invalid address. In it was a check to someone for $1,998 and a letter. The check listed a valid credit union name. I called the credit union and confirmed it was a fraudulent check. The letter instructed the recipient to deposit the check, keep $345 and buy $1,650 worth of iTunes cards (bad math) in $50 and $100 denominations at certain locations (Walmart, etc.). Then the info on the iTunes card was to be sent to an email address along with pictures of the receipts. Supposedly, the "assignment" was to evaluate the cashiers.
Concerned about my credit card being used to pay for fraudulent scam mailings being sent from a Click N Ship account in my name, listing my name and address as sender, I called the USPS to make sure the account was shut down. There are a lot of jokes about the incompetence of the USPS, but the response really surprised me. I explained the situation. The agent said I could go online and file a report, but there was nothing they could do if I don't know the information about the account under which it was sent. She checked and there was no account listed under my name, address or email account.
Apparently, anyone can steal your credit card info, open a Click N Ship account under a phony email address, list your name and address as sender, use your credit card to pay for the account and there is no way for the USPS to find the account. I told the agent I had a tracking number from the package to find the account. "oh, we can't trace a tracking number to an account". I asked if they could trace it by sender name ... nope. I asked if they could find it by using my credit card number that was used to make payment ... nope.
Then she helpfully pointed out this was identity theft and that I could cancel my credit card and inform the credit bureaus. Ummm, gee, thanks.