You could also claim it wasn't your signature and be refunded, but you can't claim that if the delivery person obtained the password only you had.