On the site cakesbysherry.ca, someone filled out the form requesting a cake. The filled the phone number as a Dallas number, but the IP shows as Lagos, Nigeria
Irectonpc--isp-netblk (41.211.206.139)

Besides the number and IP being off, they filled the form out ok, but asked what form of credit card is accepted.

Could this be some sort of spam or spoofing or a legitimate request, although they may not be sure where we are located, and hey just perhaps are in Dallas and hiding their IP so shows as Nigeria? Seeing Nigeria as IP also raises flas since so much spam emails come from there.

Sounds like a spammer checking your form to see if they can get more information to where they can get a link posted on your site.

If they are using a broadband phone, like i do, they could be anywhere in the world, with a phone number that looks like its your home town.

I can take my 0208 number on holiday with me, even abroad, so the dialling code is not necessarily state, town, or country specific

But it sounds like spam, and next a request to pay by some dodgy payment method.

Just as I thought too. Just seemed like they went through a lot of work to fill out the form with the captcha and to make it sound like a relatively legitimate request. I didn't bother to respond or for my friend who I made site for to respond.