Just some friendly advice: Consider changing your card’s bank’s password.

Years ago I had my Barclaycard account compromised, someone disabled paper statements, changed my password and bought loads of toys.

I pay my card manually monthly and couldn’t log in (I use keepass, so I knew it was the correct password)… phoned Barclaycard and got transferrd to their fraud dept. they asked a few questions to verify me and then were really good and going back through all the stuff I’d not bought.

As they’d obviously gained access to my account details, not just cloning the card, I changed all my banking passwords and put alerts on transactions larger than I normally spend.

We have 2FA nowadays, but still, I don’t trust the website security and I definitely don’t use banking apps.