The "bad guy" here is using a simple program. Take a number + 1, run it. If it works charge a small AMT. Now you have a valid credit card account that you can sell on the black market. They just keep it up, over and over., day after day. I don't know why but BOA is either a favorite target or the only company that bothers to notify you. When it happened to me, they contacted me. Sent me a new card with a new number. Which is a total pain because they all look alike and I get them mixed up, what happened to the day when you could pick a picture for the card! I did notice they quickly erase all signs of the incident. Never shows up on the statement, not paper or electronic after resolved. When it happened a second time I felt the name was the same, a coffee place, when I went to verify everything was gone. Also worth mentioning but sort of off topic, when I disputed a charge, the company refunded but keep $15. Which just pissed me off, BOA just gave me the $15 rather than fight with the scumbag insurance company!