So, I was hit with an unauthorized charge for the first time...

Question

... Certainly could've done without that in my life. Was winding down on my phone before going to sleep, and received an email from Chase. I have my phone set up so that it silences between 12:00 AM to 5:00 AM, so I have to say I was really glad I wasn't able to fall asleep tonight. Someone made a charge for $143.94 at Match.com (how can you make a charge that expensive on Match? Is the membership expensive like that...?), Chase asked me online if I authorized it. Clicked no, and they said they blocked my account, and would call me tomorrow. Logged onto my account to make sure that there were no other unauthorized charges (even though I have email alerts for charges over $1, alerts can delay or fail so you never know!) just to make sure. When I logged off, I got this as an ad: I'm covered? Yeah, no kidding, haha! Should I be concerned, still? How does Chase tend to handle things like this, are they good about it? I take identity protection really seriously. My only other card (Slate) has the same charge alerts, and has been SD since I got it (it's an emergency card). I use a privacy browser that encrypts data and blocks tracking when making online purchases. My spend tends to run around the same stores I've used for years (and I haven't been making many purchases at all, since I'm paying down balance), and since getting the EMV card, I've only made two purchases—one at Target to buy some medication, and one at Staples to fax an important document—and both with the EMV terminal. Could the information have been stolen there? I don't know, I'm still really jittery from this situation—my hands are shaking and I even feel like crying a little bit. $150 isn't a lot for other people, but it's definitely a lot for someone like me. I don't know if I'm going to be able to sleep tonight, haha...

Answer 1

Alright, so last night, I couldn't sleep. Sunrises can be a little slow.
Received a phone call this morning, did the song and dance, and she said I would get a new card within 3-5 days. When I hung up, because I was so rattled about this, I didn't bother to recheck the phone number to make sure it was legit! She had my personal info, but she asked me my email as well (not username or password, but...)!
I have 2-step verification on my email account, so I'm not concerned that (if the call was not legit) that they would go much further. Changed all of my passwords last night as well. And no SSN info was asked, so there's that. She also made me aware of two other previous pending charges that have been there for a few days (which are legit, I had been tracking them), so I feel slightly more sure that it was legit.
Checked back at the email and webpage provided to look at the security certificate, and it checks out fine. Nevertheless, I called at the back of my card because, by then, I was already nearly crying over my oversight--anxiety issues and a lack of sleep will do that to you, heh...
This CSR tells me that, indeed, my card had been compromised, and confirmed that the account had been blocked and that they were not overnighting the card, that it would arrive in 3-5 days (which also eases me, as the woman said they were sending it via regular mail and gave the same timeframe).
Regardless, I'm the world's biggest worrywart, so I requested a fraud alert on my CRs. I don't know what to do with myself now. What else can I do to protect myself? Had a good cry, I think I'll try and get some sleep, finally...
Thanks for warning me about the passwords, though, I hadn't thought about it until some of you said so!