I received a phone message from my credit union's fraud detection department about a transaction for $1 that raised a flag. I called them back and was given the information recorded with the transaction, which consisted of a name of a company and a phone number. I called that phone number to see if I could verify the transaction, which I don't remember having made. The person who answered the phone said that they provide billing services for many companies, and the only way she could look me up to see which company charged me the $1 would be if I gave her:
- my name
- my credit card number
- my SSN
I wasn't willing to give her so much information. Was I right in thinking that that would be too much information to provide?
Is there any other way of figuring out what the mystery transaction was? I'd prefer to avoid closing down and replacing my credit card if possible.
(For now, the bank has temporarily put a hold on the card.)
Note: I have had dealings with my credit union's fraud detection service before, and I'm certain that I was actually speaking with them when I returned their call. That step in the process is fine.
Update Thursday: I talked to the bank yesterday and they said there had been two new attempts to charge $1, with something different in the merchant field each time. My online banking account was not showing me any of the three attempts. The bank sent me a screenshot of what they were able to see of the three attempts. One of them had my own phone number as part of the merchant field. So I called Spectrum, my landline phone and internet service provider to see if they had any bright ideas. Eventually I discovered that my 16yo son who has OCD and Tourette Syndrome has been regularly phoning a "free" chat line for the last few weeks. I'm not sure if this is connected to the three attempted $1 charges. The chat line has a website and eventually I discovered an email address for law enforcement to use to contact them. I sent an email and the chat line people have agreed to block our number from being able to contact them. They told me what the merchant line would say for a charge from them, and it doesn't remotely match up. Much or all of this is tangential to my original question but I did want to provide an update. I think the basic answer to my original question is:
name + credit card number + SSN is TOO MUCH personal data to be giving to anyone that I don't already have a trusting, well established relationship with.