My email was used to join a well-known US store, thought it was spam mail until I saw emails regarding orders being placed - I did the standard email reset and have gained control of this account. Turns out this person was trying to order macbooks etc, has a US address and a VISA card (thankfully not mine). All orders didn't get processed, so I'm guessing stolen credit card. So what are my next steps, I'm thinking email company detailing what happened and suggest fraud flag be placed on card and address? Anything else?