This happened to me last year. There were charges initially for like $0.03 yeah... three cents. Then a $29.95 charge that hit 4x before I caught it. (only check online every 3rd day or so)
Then there was $59.00 by another company and $11.00 by some other company. Either the thieves own multiple charging accounts (companies) or they all pass along stolen info with each other. Who said there was no honor amongst thieves?
I went to the bank and filed fraud charges and had that debit card killed. It was only coming from my debit card and not bank drafting or credit card. The bank took the info and told me to wait by the mail for a fraud form to arrive, to fill it out and bring it back in and they would start proceedings to credit my account back. But the bank had every cent of my money back n 48 hours. Would have been in 24 hours, but I got there at like 330PM that day. And this was BEFORE I even received the fraud form in the mail. Days later I filled it out and returned it and never had that problem since.
Now a coworker had the same thing happen. Charges of a few cents at first to see if the account was active. Then multiple charges of varying amounts. The online activity showed the company and website on there that was charging him and we went to their website (adult thing, not adult site, but place that sells universal adult membership pass to various sites that require it) in big letters at the top they stated if there was a billing dispute to call them FIRST so they could resolve it before going to the bank. This stupid ass called them and they asked him all the questions like they were concerned about his complaints. Asked him what account was charged? How much?, what name was on the account?, what his email address was?, the three digit on the back of his card...etc....
took all his info and promised in seven days that he would see a credit. Gave him some generic claim # to go to another ticket site to check the progress... and then in the course of 4 days, charged over $600 to his account. then bailed out.
He sat there looking at that ticket sit with his claim # telling him day after day "Authorization in progress and adjustment being verified" while they milked him. Of course when he went to the bank to file fraud adn the bank contacted this company (in Europe), they told him that they had a binding contract where he joined their site and provided the bank with the info, name, debit #, three digit on back, and the email addy that he uses to "prove" that he really did contact them and purchased an adult membership pass. Or how else could they get all his info if he didn't fill out the information form himself?
In all, took him about 3 months to get most - not all - of his money back.
Morale to the story? Go directly to the bank and don't waste a minute contacting the scammers.