> what does it achieve? Your business is buying stuff with a stolen credit card, and selling it to punters. You don't tell the merchant to send it to you, at

> what does it achieve? Your business is buying stuff with a stolen credit card, and selling it to punters. You don't tell the merchant to send it to you, at your home address; you might get picked up! You hire someone you don't know (and who can't identify you) to take delivery of the goods at their address, and ship it on to the punters. When you're reshipper gets picked up, they can't give you away. You don't have to be located in Russia for this to be useful; US citizens doing CC fraud have exactly the same incentive to use a reshipper, even when both the punter and the reshipper are also US citizens. Krebs seems to focus on Russians, possibly because he has his foot in the door of a number of online Russian crime communities.