I know this is an old topic, but I am suprised that I haven't seen anyone else post on this.
You should get their IP number right on your order form. either formmail or a more robust order system, you should always gain their IP number when they put down card info.
Personally, I have found a great program to trace down IPs and make sure they are at least from the area they say...
visualroute makes a low cost program that you can put right on your desktop and trace any IP. It shows you where in the world that order came from, and if they say New York city, yet their IP traces to the middle east,, easy call there........
Also, unlike WD posted above,, I have found that most of our recent fraud orders do contain all of the corect data, and a simple phone call will let you talk to the card owner who is usually unaware of the card use. ( if the IP traces wrong). I do make those calls, and if possible, I let the people know their card info is being used by a thief on the internet so they can cancel their card.
1. get their IP on your order form - ALWAYS
2. use something like visualroute from visualroute.com to trace it back to see where that IP is from.
You have little rights as an internet merchant, so it is up to you to reduce your charge backs before they happen.