Although decades later than my ‘war story’ with (hopefully) better IT systems everywhere, it is not always ‘the customer’.
As unlikely as it may be, it can happen. The Visa or Mastercard systems should be able to provide details of the where and when and often the details of the transaction, not just that it was ‘yours’.
