BOY, I hate to hear that Dave,,,,,,,It just drives me up the frigging wall as it has happened to me TWICE recently on my reloadable CC ,,,!!  Mine is not near as yours and I relly feel for your situation,,,,,,!!  Here's hoping your bank can recover yours and make you whole again. What I DO KNOW is that the penalty for fraud is not near enough YEARS busting rocks,,,,,,,

Chase Tech explained a LOT of the How they Do that.

Phone Cloners are still in use, looking for dummies as I that have not accepted Multifactor Authorization(Do Now, too late), can nearly instantly See passwords in logs to such as VENMO or Paypal, any similar sites, can read Bank account numbers if online bank at all, can read a Chipped Debit card but are harder to attack, still accessible.  As to the Phone Clone, can redirect inputs for a short time to THEIR Phone you may not see until they shut the clone off.  I received a Single blurb warning on AMEX while in my shop, that sent me on a mission to see what was up.  By then had SEVEN Charges on that card so went to my others, Chase had four.  After they quit as I changed PWs and called authorities, the remaining Authority Challenges showed up.

RFID or Card Chip scanners are Pocket Sized now, some can be concealed in clothing where all have to do is get within a few feet for code clone, can happen ANYWHERE, anyplace people are in close proximity and do NOT have to be in direct contact or showing interest in you or your party.  

And YES, I felt Rural, Bulletproof, inaccessible where NOT EVEN CLOSE.

Friday went to Washington MO HF, got a second 2T hoist and trolley for my lift for the cab.  Went to dinner at Marquardt's Landing, not all that crowded, went to Schnucks Market, as well HF and a Gas Stop.  Milled around for a time in HF and at Schnucks, no telling where these people got us.  Again per the tech, Multifactor EVERYTHING, sicks but slows the scams, RFID Shield wallets DO WORK, have one coming, Iphones can be app equipped but even as Hackers can get by every known Anti Virus system they can get thru phones, just do not put anything of value on them.  Last but not least, DROP Social Media, BIG Target Scan access points for Scammer/Hackers looking for us.  She was 25, is NOT on FB or any other media sites, not worth it.

EDIT:

Almost forgot, they dearly LOVE Online parts/materials buyers, if do ANY off a phone can have ALL that info instantly.  Off a home PC a Little Harder in country but still doable, do not know any way around that for old machines.

kinda wonder why CC company didn't call as to 'charges being 'different than normal ' ?

13K is a LOT !!

My only CC has 'tap n go ' disabled..have to insert and enter PIN, every time.

Same with mine. Don't need that much "convenience" in my life as not that lazy yet.

'clone phone' ?  so someone has a phone with all your stuff on it ??

THAT is friggin SCARY ! good thing I don't own a cell phone !!!

there is no way I'd be paying on the purchases.

heck simple 'cell tower ping' records will show where the 'clone phone' was used.

 Well, Dave,,I'm hoping you got some good news this morning,,!!

While I do know there is not anything that is completely Safe from the crooks of the world you can reduce the damage they are able to do.

 About 10 years ago I got hit for $3,500 on my checking account and my bank and CC were able to stop most of it and after realizing a big chunk was due to internet purchases. The bank suggested I get a "Reloadable Card" and maintain a minimum amount just for internet purchase. The reloadable has no electronic ties to my checking account,,so the most they can access is the minimum "I" have loaded into it whenever the balance gets to that point. There is NO Auto load EVER!!!

  I am ccurrently in DISPUTE with the reloadable card for $59 but not from my checking .

 Hope this may be used by some,,,,

The ONLY somewhat better news is Chase no longer has those charges on our CC Statement, are In Review per the tech there, cannot access AMEX currently so that will have to wait.  Any and ALL these ID Theft fraud attacks are on our Home Owners Insurance according to our rep.  May be a $1000 deductible but have $25000 coverage.  He has not ever had to file one of these so is new to both of us.

my 1 CC is with BOA,, yea, I've heard the horror stories about them,, but they have caught a lot of fraudulent charges, get a new card,, but I haven't had to stand any of them bad charges, they have been able to clear them up.

the only pay service I have is PayPal,, and I don't use my phone to order stuff, mostly go to the desktop, or jus call the merchant...

https://youtu.be/SzINZZ6iqxY?si=eOZwb63eeCfV0eLI" rel="nofollow - https://youtu.be/SzINZZ6iqxY?si=eOZwb63eeCfV0eLI

But a man can still dream, right?

DMiller wrote: Remember what I noted, Phones can be Cloned, the cloner then redirects ALL Information texts and mails to that Clone for a time until they are done with it.  May not receive those warnings until already done.

 I do not use my phone for any internet purchases,,,,Chit,,,,I don't hnow how,,,,!!

Had not thought of that angle. But now that you put it out there, I don't dough that you are correct.

When I picked it up at bank, I told them to disable. yup 'funny looks for sure', but they did it.

ANY branch that flogs that credit card ,can disable  it

You 'should' be able to ask online as well. They 'clear a bit in a byte', then next time you use the card, it'll update and be disabled.

Thanks for the info guys.

 I want to disable that chip entirely then it has to be swiped in a reader.

  Thinking about just lining my wallet with heavy aluminum foil where I carry couple cards.    I would think that would work.

My card didn't work at the local pump last year, got home and called the company.   when calling, I got sent straight to another department and there was a live person on the other end and asked me a bunch of questions andI had not used or authorized the use of the card until I had tried to buy gas.  They said that the card was used for a couple dollars and right away it was getting hit by several other places and the card company put a halt on the card till I called.   When said and done, they concluded that they would re-issue my card with new security code.  Sure GLAD that they caught those scamming charges. Woulda been in a world of hurt if they hadn't.

With all this discussion about CC theft,,AND the fact that I am also currently in a Dispute over some questionable charges on mine,,I decided to go to my bank to clear a few things,,,I was asked if I had an RFID wallet for added securiy and I had to say NO,,,,

 There are some banks that supply the little "sleeve" that gives you some protection but there are now some "RFID Wallets" that are even better than the sleeves!!  I checked those available from $9 up to the cadillac $200 models and settled on a $14 model,,,

 As Dave states,,a "Reloadable CC is a much better method of doing online shopping as YOU load the amount you want in your relaodable  AND more importantly it  has NO electronic connection to your  checking account.

 The bank also warns about using your phone for internet purchases, which I do not.

 Having said all this,,,there will most likely soon be something else the scammers will invent that will  bypass even the current ploys,,,,,

re: new ‘Tap and Go’ is the recent release by card companies and is readable at up to twelve feet when use one.

don't think so... RFID tech is pretty good at 4 INCHES, so please show a link where it can read any further.  Cards (RFID) get needed energy from the 'reader' to power up the internal computer chip.

As for vehicle thefts, I can 100% prevent any of them from being driven away for less than $20 and an hour's labour regardless of the thief's 'computer' skills.

curious,as I was an Avionics tech, did 'energy harvesting 6 decades ago, and laugh at all the vehicles being so easily stolen...

below was  cut/pasted from the RFID journal

....

 The passive RFID tag in your friend's credit card is an HF tag based on the ISO 14443 air-interface protocol, which limits the read range to a few inches, for security reasons. RFID 

credit cards are actually much safer than conventional magstripe cards

....

the 'passive' RFID tag in the credit card captures the RF energy from the 

reader(misnomer btw..) ,converts into DC voltage, to power the internal computer

say it takes 1 watt of RF power to read the card from 1 foot, go 3 feet away you need 9 watts, from 10 feet 100 watts of power....

as for 'stopping the scammers' reading your phone, simple encrypt the data,especially any 'phone to home computer', and of course change the 3 or 4 passwords on every WIFI device. Big problem is almost nobody does this ( Blackberry did.... )

Not Parts, Gift Cards, NO Names.  Got that from the AMEX rep spoke to this afternoon.  Smart cookies, NOT Trackable.  SHOULD Have thrown major Red Flags and been declined, but they received Approval Codes.

Soon as this AMEX stuff is paid, their cards will get sent back, in pieces, Canceled.