My husband got a pop-up ad on his phone for a fashion website and purchased two pairs of sunglasses using our debit card. The confirmation was emailed to me (marked as spam by gmail), and the site seemed very suspicious to me: the URL is nonsense, the confirmation message had a number of basic grammatical errors, and the deal seems too good to be true. It could potentially be completely legitimate, but I'm suspicious.
What, if anything, should I do at this point to mitigate the fact that my husband just gave out our billing information to a potentially fraudulent website? We are in the USA.
Billing confirmation message:
no-reply@tobeno1shop.com
Jul 30 (2 days ago)
to me
Dear {{ myemailaddress@gmail.com }},
Attention:This is a confirmation for your order detail. It means you have paid for the order successfully.
Order details:
Merchant Order No. : 628
Order No. : {{ order number }}
Payment Date&Time : Mon Jul 31 03:01:01 CST 2017
Amount : 54.98 USD
**Please do not reply to this email. Emails sent to this address will not be answered.
**Due to floating exchange rate, tiny disparity of order value may exist.
**Please note that your bank may apply a small charge for handling this transaction.
Contact details:
Email: service@tobeno1shop.com
☆ We an independent third party payment provider and as such protecting all cardholders is our primary concern.
☆If you have any problems about this transaction, please don’t hesitate to contact us. We’ll try our best to help you until you are satisfied with it.
☆Please ensure our email add added to your allowed list to ensure that we can help you properly.