Happened to me too, with my Paypal debit card. They hit me on June 26 five times for a total of $1700 and then again on July 2 another 5 times for $2300 so $4000 total. Called Paypal and the guy said he never saw anything like this before. The first charge was an authorization that had about 25 different random amounts before it finally ended up being charged. Then the other transactions that went through matched some of the amounts. I think they're doing this to confuse AI anti-scam programs, but who knows? Bad thing is that I'm still fighting with Paypal to return my money. So far they returned the first 5 transactions but denied my disputes on the newer 5. I have no idea whatsoever how they got my card#. I've been in Mexico the entire time with the card in my wallet. On top of that, I rarely even use the card (maybe 3-4x per month).