Like grgr said, it is down to 'abondoned' orders.
These orders are created when a customer conpletes the checkout stage, right upto the confirmation step (last step).
If a customer bails out, adds a product, or changes any part of the order, a NEW order number is generated so the old one will become redundant effectively.
Your guy isn't stealing orders, you have no worries there
