This may seem kind of obvious, but since it hasn't been mentioned, I will. Have the cart check to see if credit card orders are being shipped to the address on the card. If not, it should set a warning flag for extra security checks.