A guy at worked ordered a watch from the back of a Scientific American or something. He never got the watch, but a call from the (Ohio?) police about 6 weeks later, telling him he was a victim of identity theft. They found all his info, as well as a bunch of others with this woman who was selling the watches.
Watch out if to "verify" the person asks for much more than your credit card number! For most people, this is common sense!