I recently got a call from someone saying they were calling from the fraud department of a credit card I actually have. They knew my first name, the state I live in, and the first 8 digits of my credit card number.
They told me someone in another state was trying to use my card on Amazon to make a purchase for a particular amount. They gave me the person's name and asked if I knew her. I didn't. They told me they were going to cancel my card — actually both my cards, but I only have one.
When I asked why the caller ID didn't show the credit card company, they gave me a rambling answer I couldn't understand, partly because of the caller's heavy accent, partly because I don't think it made any sense.
They asked for the last 8 digits of my credit card, which I of course didn't give them. I ended the call and called my credit card company, who told me there was no charge matching the one I was given on the phone and no fraud alert on my card. They told me I didn't need to cancel my card if the caller only had the first 8 digits of my number.
So, obviously a scam — but how did they get my name, state, and 8 digits of my card number?