Isn't that exactly when you should have your card number changed? You gave your card info to a blatant fraudster. If they're willing to ship you a pile of rocks then there's a significant chance they're willing to use the card info you gave them to make fraudulent purchases.