I work in fraud management in the payment space for my day job. (Unfortunately we not have a publically available option yet for someone at your scale). - Y

I work in fraud management in the payment space for my day job. (Unfortunately we not have a publically available option yet for someone at your scale). - You are most likely violating OFAC/KYC regulations in the US (Assuming you are in the US with references to the FBI) - It is easy/cheap to buy on the black market complete combinations of credit cards/cvv/social security info - People who buy/have these stolen cards want a cash exit - Verification of both sides of the transaction are really needed for what is essentially a money transfer, to keep fraud down (steps beyond CCV to prove someone is in control of a CC) - You are lucky, that $2000 was probably an initial probe to see what checks you had in place. Shutting down was the right thing to do. If you had left it open, you could've added three zeros to the damages - CC's are not secure and the "merchant" is always the loser in fraud. Visa/Mastercard will always make their cut. Additionally ACH/echecks doesn't provide much in the way to claw back funds (any really). Edit: Oh some other notes, the local PD are simply not equipped to handle this, even though you are the victim as you have been defrauded. Chargebacks can continue to roll in down the line, typically 30-90 days after the transaction. You may have violated your MCC code on your merchant account by doing this, as getting an MCC code to do a balance transfer like this is not a simple thing.