Update: Called sandisk, the serial number checks out. However, I'm still not convinced: The "Class 2" certification symbol appears on the wrong side of the card. I'm sending them a picture - I suppose it's possible that the serial number was copied, since there's nothing preventing that.