Never thought this would happen to us, especially since we're so careful with online shopping and banking.. but my wife discovered today, as she logged into her bank of america account.. she saw 3 atm withdrawals from some weird place "Hansa something something" for a total of $450. Turns out they were atm withdrawals in Estonia!!!! The worst part is, they had her pin number (its a boa check card) and the bank support rep said that they probably have a duplicate card!! I know a lot of credit card fraud goes on, but how the hell did they get her pin number? We both use our powerbook, with all the security updates.. she doesn't click on any 'spoof' email or site which asks for banking info, etc etc. I'm quite puzzled and worried.. I told her to change everything.. her social security #, checking accounts, etc etc. Her card's been cancelled and the bank is going to deposit the withdrawn funds back to her account. Has anyone had this experience? I still can't understand how they could have acquired her pin number.. it can't be brute force hacking.. keylogging maybe? If there's a keylogger on my pbook.. surely they would have gone after my cards because I have a lot more money in my accounts than she does.. arrghh!!! And the stupid bank should have some sort of geographical restriction on atm withdrawals!! I mean geez, she just withdrew $20 today in los angeles.. she couldnt possibly reach estonia in two hours!!!!!