Made a large purchase order on a site with a safe Norton rating and A+ BBB rating. Noticed I put the wrong shipping address, called the number on the site, and I got the order canceled and received an email, however, I was debited the amount and I have the following line item on my rolling bank statement:
JAN 27 Hold: Payee Name: PRE AUT **** (REDACTED STORE NAME) ; Reason: ****** $500.00
* = redacted random positive integer
I was told by the person on the phone that the hold should release within 48 hours, so did my banker. However, shortly after this, I received an email from "firstname.lastname@example.org" with the details of my order requesting that I call the provided number to make sure the transaction was authorized by me:
My banker mentioned that "Unfortunately we are unable to do anything about the pre authorization on your account for that amount. It is planned to either hard post to your account or fall off of your account on Monday." This is what has me worried, in light of the fact that I received what appears to be a phishing attempt shortly after I made a purchase and then canceled over the phone. How can I force non-payment to the vendor given my reservation that something is afoot? Am I too paranoid? I forwarded the email to email@example.com (cc-ing noreply along with the message), and my bank's management staff.
So, basically, I have a potentially genuine cancellation email enacted via phone from a number provided on the presumably safe website, but I've got a hold that might hard post.
Of note, I managed to find the organization that owns the domain name "enfactnotifications.com" via ICANN. The organization is Fiserv, Inc., which appears to be authentic: