Unauthorized

We know an individual who had "unauthorized charges" show up on one of their credit cards.  They explained the incident in person.

This may or may not be "common" or "happen a lot".

Regardless, it happened backward.

The order of events was:

• They received a call from the "credit card" company to inform them a "replacement card" would be sent.
• The original card had been "used" to make an "unauthorized purchase".
• The original card was a "new" one that had been issued and mailed, but the individual hadn't received it yet.

Normally, a card must be received and "activated" before it's used.

Please, please, explain how a "credit card company" can:

• Issue a brand-new card.
• Mail it to an individual.
• Have it "stolen" and "used" before the individual ever sees it.

We would really like to know.