Like, contact the customer service hotline, and since they're sending the SIM card through the registered address, someone must get it in delivery. Alternatively, just literally ask the customer service to change the address. They should checked these kinds of requests, but considering that currently the T-mobile data leak is on the front page, you shouldn't be really shocked on how lax American security standards (except for their military) are.