<prompt> Human: Hello, everyone. Im a long-time lurker with a problem. Im not sure that this is the right place to post this question, but the fraud subreddits didnt look exactly right, either. Since this affects my personal finances, here we go:Im a financially stable individual from Texas. In July, I noticed a charge to my checking account that came from DOBA. I looked up the company, which does drop-shipping, and doesnt seem to be known for scamming. I figured someone had gotten hold of my debit card number and used it, so I called my bank and cancelled the card. They reversed the charge and issued a new card with a new number.Fast-forward to yesterday. I see a new unauthorized charge from DOBA, for the same amount. This time, I call their customer service. Someone had used my new debit card number to open an online store using their service. They were able to give me the name and city on the account its from California, and not a name I recognize, and said they were cancelling that account and forwarding the case for investigation.Then I called my bank again and told them what was going on. They cancelled the new card and took down the name and city of the person named by DOBA. A new card has been issued, and the case is being sent to an investigator.My question is this: How did someone get two of my debit card numbers in two months? What am I missing?I have changed all of my passwords. The only recurring charge to that checking account is from Spotify. But when I called DOBA, they had to look up the account by the last 4 digits of my debit card, so that would tell me that the charges were being made through the debit card rather than through a direct line to my bank account.If someone can help me understand what might be happening, or if you see something I might have missed, I would appreciate it if youd share. Thanks for reading!  <response>: Youre shopping somewhere thats got a terrible leak. It happened to me - they got one card twice the old one AND the replacement and another one once. When I figured out that Id only used all three cards at one place over that period of time...then I knew who had the leak. 