Yeah this is what kills me; if I send something legitimately to an address it hasn't seen for me before it requires me to re-enter my full credit card number and other information to prove I am me; I don't understand why they don't do the same for replacement orders. It doesn't seem like that hard of a problem to solve when not solving it means they are out $1000 worth of product from my account alone times however many people this has happened to.
But when you add a new address to your account, shipping to that new address could cost you money. When Amazon ships a replacement to a new address, it could cost them money. The risk profile is very different, so the implementation is different.
For the record, I don't understand why Amazon keeps allowing this. It seems like it could be fixed without much of a hit on customer experience, and the fraud ultimately does cost all of us more, as they have to cover those costs through higher prices.
