I manage a medium size Ecommerce website (Portafixe.com) and we were starting to get alot of transactions that looked very suspicious. I saw that all of them were made from very diffents locations than the credit card billing address. From there, I made a small script (PHP) that calculate the distance between the IP location and the shipping address and today i'm giving it to you. Once you have the distance, you simply judge what distance is acceptable (because it's not precise as a GPS!).