Oh wow!
Yes, I was in the US in December. I had initial card checks at HomeDepot.com and Lowes.com (both of which I missed because they didn't trigger alerts) a few minutes before the fraudent transaction. That transaction was in-person, it seems.
Did you have any magstripe-based charges before that? Will PM you separately to compare notes.
I have almost exactly the same issue on Dec 23rd started around 2AM SG time
All these fraudulent transactions happened in USA, I was not there and never used my card before for overseas transaction.
1st trx Lowes.com USD0 - should have received OTP if this is an online trx, but no OTP received
2nd trx HomeDepot.com USD0 - also no OTP receive despite it's a "dot com" store
Then the real attack started
3rd trx The Home Depot 1060 (it's a POS - point of sales trx, so someone use a fake card with my card detail at cashier payment point in the store) USD8.7k+ equivalent to almost SGD12k
4th trx The Home Depot #1110 (another POS trx at different POS 6 mins from the previous one) USD2.7k+ equivalent to SGD3.8k+
5th trx attempt (declined as my card remaining limit already exhausted) The Home Depot #05... cant see the rest of the detail (another POS trx at different POS 5 mins from the previous one) USD1.3k+ equivalent to SGD1.8k+
6th trx attempt (declined as my card remaining limit already exhausted) The Home Depot #63... cant see the rest of the detail (another POS trx at different POS 2 mins from the previous one) USD2.8k+ equivalent to SGD3.k+
I woke up on that day with unpleasant surprises of trx notifications in my email inbox.
I quickly reported to Instarem and also took pic of my card in possession just in case I need to prove the card is no where near USA a few hours from those trx (from the pic geo location info).
After submitted the form with details, they told me that they have filed a chargeback against the merchant through Mastercard and it will take 45-90 days to process with NO GUARANTEE of success.
The possibility of having to pay first the fraud amount of almost SGD16k scares the life out of me, so I double report to my linked card issuer bank, Standard Chartered.
Next billing cycle is tomorrow, anxious to see how the billing will look like.
I first thought the fraudster get the hold of my card detail because I made online payment for concert ticket for my daughter (perhaps the ticket agent database got hacked).
But now that I know I'm the third person in this forum that faced similar problem, could it be the data breach/leak is from ....?
I've now permanently blocked my old amaze card and got replacement card.
And I de-activated overseas transaction function.