On March 19, 2020, "Linda Juan" (or whomever it actually is) placed 4 orders at once, all different billing addresses, and all 3\4 orders declined. At their 5th attempt, the order went through. My website isn't a stranger to an older person ordering products, so I kind of assumed at first that someone was just having a hard time ordering. Well, I was wrong. I sent out the order that same day. Yesterday, March 30 2020, the UPS package comes back to the warehouse and the reason was that the address and receiver name did not match.
I sent my "customer" an email and when I didn't hear back I called, and that is when I realized this was funky. I looked up the name "Linda Juan" and BOOM! All the info I get is that "Linda Juan" is a fraud.
Her name was cut+pasted into the customer information lines, with the script being included... looked like:

Linda Juan">
'">
444 Rollins St">

So then, there was the worry that malicious code was hidden in this but I have not had any security breaches since this has happened.
SO! BEWARE! BE LESS ASSUMING AND MORE ALERT!
I learned my lesson this time.