All was apparently the result of card transactions through Amazon because those were the earliest fraud buys, altho' the fraud included others paying their phone bill, movie rental, fancy shoes from a cuppla shoe stores, and primarily Amazon purchases, including electronics like computers, a TV. The near-10K (mighta been 8+K?, at the very end of last year/beginning of this) was the last and discovered within a cuppla weeks, the second episode took me a month to ID last summer, and the first went back about 5 months from when I discovered it last Spring, so I lost a cuppla hundred dollars for not discovering it within 90 days - I think those figures are correct. At last once Amazon or the bank caught it before I did.
Part of the pattern is 3-4 or more small purchases, say under US$20. When they get away with that, they start buying bigger. One might not notice a hundred buck over a month or two. (I hate shopping, buy most everything other than groceries - and some of them - online for delivery.) And if they then move quickly, they can run up a few thousand between billing cycles.
One frustrating thing is, even after the reports, the victim gets no follow-up; I mean, I did get the money back other than as above), but never heard re any investigation or prosecution.
This stuff happened to me twice about 5-6 years ago, as well, once after a local grocery store purchase, the other I don't know how they got the number. I changed banks for un-related reasons after the first two, still use the same one after the second three, but I don't believe any blame lies with the banks - someone got the card numbers and enuff verifying info to do it. The issue re banks is unavoidable in that it takes 2-3 weeks to get a new card, altho' I pitched a b. the last time and they "overnighted" the replacement (which still took a cuppla days) because business account.
As a cost, you can add a cuppla hours on the phone between Amazon, the banks, the investigators ... The last time there was about 20 or even 30 purchases in a week span, was why the number was so big; when you buy on Monday it may not hit the bank until Thurs or so ... And then there was the issue of separating the legit buys from the frauds, particularly because Amz bills through a cuppla different entities, apparently involving whether Amz is the seller, or its an entity selling through Amz, and mebbe other criteria. That was important to head it all off with stop-payments through the bank; actual refunds took a week or two.
And FWIW, the local store purchase were inna cuppla different Upper Midwest states, which I was told may mean my EI was sold, altho' the criminals may have just traveled or used family and friends for their thefts.
As another consequence, I now use 2-factor verify much more - guaranteed to add time and aggro to purchases, and actually chills my spending.