I had this happen to me recently too. The people at the bank said it was unlikely that an on-line purchase was to blame. Far more likely was a "skimmer" type operation where the magnetic strip on the card was decoded and then copied to another card with the thief's name on it. The scumbag...