I actually work with a bank and we suggest you start by giving us a call and locking your account so we know where it was last used and it is not able to be used again. If we can see where it was used and the time, it can become further investigating but that’s until after the first situation of the fraud is complete and confirmed.