What's to risk? Order, receive, test thoroughly, return if defective, keep if not. Even though some people reported receiving cards that appeared to be used, to the best of my knowledge, the cards worked just fine.
I think a few people said Shentech offered to refund their money, so I don't think Shentech was trying to cheat anyone. Shentech claimed they had no knowledge of the discrepencies because the cards were drop shipped from a supplier's warehouse, not their own on-hand inventory. Maybe, maybe not, but that explanation is plausible. A lot of stuff is drop shipped from a supplier.
Anyway, it was the AGP cards that seemed to be where all the funny business was. I've heard no complaints about PCI.