I don't know if what I did was the right thing, but just now, I told UPS that no, I would not accept the packages from costco.com. Apparently, the identity thieves had the Costco goods shipped to my apartment. I briefly thought about holding it for "evidence" and calling the police. If I did that, Costco would be more likely to get upset. However, I didn't want to take the chance.