I received a call from Bank of America (which I let go to voicemail). They were calling because of a suspicious transaction on my card. Sure enough, when I checked online, there was a charge I didn't make. I called the number they left, but things got really suspicious when they asked for my social security number and other personal details I didn't think they needed. So I ditched that call, and called BoA on the number listed on the back of my card. They cancelled my card and refunded the fraudulent charge. Turns out, they've been seeing this scam a lot recently.