If you order parcels to your friend's address, sooner or later the police will come to him. So that your friend is not in danger, you need to draw up an agreement with him, stating that he supposedly works for some official company for the receipt and delivery of goods.
Then he will be able to avoid criminal prosecution if he proves that he had no intention to commit card fraud.
It is best for your friend to tour the country, visit different states, then it will be difficult to catch him, and you will always have fresh addresses for parcels from online stores, which he will rent for 2-3 weeks.
Also explain to your friend that parcels must be received in the names of cardholders.