I have experienced something similar, and just as baffling.
A few years ago, just before my wife's birthday, a parcel arrived, address to her. She opened it and found it was a Mac Mini. There was no indication of who could have sent her such an expensive present, so she phoned Apple, who told her that she had ordered it. But, though the name and address were correct, the buyer had used a fake email address and a different credit card.
We called the police, and the officer at first said it was a mixup caused by similar names. But my wife's name is unusual: in fact there appears to no one in the world (or on the internet, anyway) with exactly the same name. The domain name on the fake email address belonged to an on-line discussion forum for vicars (I am not making this up), part of a group of professional forums, none of which showed any activity.
The police officer said that scams like this depend on the delivery being intercepted, perhaps by collusion with a crooked posty / driver. He also said that we were perfectly entitled to keep the Mac Mini, providing Apple didn't want it back. Unfortunately, they did.
The return procedure was very secure, with a timed collection by a named driver, and codes and password, which hints at another way the scam could be done (a fake driver turning up the next day to collect a 'mistaken' delivery).
I am still baffled by this. And disappointed that we didn't get to keep the Mac Mini.