Okay, I just went to the bank...told them that if they see a $400 transfer, so tell me because I didn't authorize anything. I also cancelled my current debit card that had my number on there...and ordered a new one with a different number. I think I've covered my bases pretty well.