I may have been scammed.

[Ms. Toad]

11. If the call purportedly came from your credit card company,

What I do is hang up on the call and call the number on the back of my card.

That way I'm in control of the communication and I'm not giving information to a scammer.

If it turns out to actually be the credit card company, I read them the riot act. They should not be calling and asking me to confirm charges without being able to verify who is calling - AND - there should be no adverse consequences to refusing to respond to a random unidentifiable caller. The latter is usually the sticking point, since they often have shut off my credit card at that point. So I work my way up the chain of supervisors until I make it uncomfortable for someone who has some control over whether action is taken based on my refusal to interact with their robo-call.