> For a long term user, you seem to have made a lot of assumptions and mistakes.

What were they?

> I can't tell if you froze ALL of your cards, either immediately upon discovering the fraudulent event or before raising/disabling limits and then 'deal' with the rogue virtual card afterwards.

I froze the card the charge was made on immediately after I discovered the fraudulent transaction, yes. I didn't freeze anything before removing the limit because I didn't think it was fraud until quite a bit after I saw the large transaction go through.

Initially I thought my work had used my card to book a trip for me or something similar. I didn't even imagine someone could have gotten my card details somehow.