Well, that was weird and annoying.
Got a (real) fraud alert from my bank on a charge from “masudanete” for $9.23. Never heard of them, transaction was proactively declined, debit card is canceled and a new one on the way.
I don’t have this card linked anywhere online, and I’ve used it a whole 8 times in the last 6 months - and the only place I wouldn’t have used tap to pay was at an ATM *inside* a PNC bank branch.
How the fuck that number got out into the wild is beyond me.