My bank account was credited for $38.34 for a charge by this company. I have never heard of this company and never made any purchases.

When I called the number, the CSR told me that I needed to give her my name, phone number and the credit / debit card number to investigate the charges.

Obviously this is a scam but how did they get my card number?