Sorry in advance for the long msg. I (unfortunately) have an account with Citibank. My debit card was expiring, and they sent me a new one via mail. Expected to arrive on 5/1. Two days ago on 4/28 I see emails from Citi confirming my password and pin were changed, at 225pm & 228pm respectively (just notifications, not asking for confirmation whether it was me or not). Saw these emails around 315. Immediately called the bank and told them to block my account which they did. Was also told by them to reset my password, which I couldn't do since whoever accessed my account changed the phone number also. So the Citi rep set the phone number back to mine so I can reset my password. I then asked if there were any withdrawals from the account. She said yes, at 230pm. It was for a large sum of money, around 90% of the funds in the entire account (well north of 1000). She also said the withdrawal was made using the debit card that expires in 2031, which indicated to me that the person intercepted the card in the mail. She also said the card was activated at the branch. (Weirdly, at 340 I got an email saying my pin was trying to be changed and asking me to confirm it. Bit too late buddy) So all in all I believe what happened is, my debit card was intercepted in the mail, and someone took it to the branch, activated it, changed my password, pin, phone number, and made a large withdrawal. All within a short time frame. How all of this is possible and it didn't raise red flags, idk. But my main concern is getting back a provisional payment from Citi. I did open up a case with them to dispute it. I mailed in the signed doc they sent me as well, along with an FTC report for identity theft. I do also plan on filing a police report (bc Gemini said it would help my case). But does anyone know any other steps I can take? Am I going about it correctly? Citi fraud dept doesn't seem too helpful so far either.