15 years ago, a credit card my wife and I didn't use much was compromised. Someone made about $400 in purchases, none of them local. Bank called, said they were suspicious. I signed an affidavit stating they were fraudulent, and the bank took care of everything Never had an issue since.
Back in May of this year, my home email, eBay account and PayPal account got compromised - someone ordered a $400 video camera from seller in Florida, charged it to my Ebay/PayPal account, then tried to have it mailed to Virginia - fortunately, it never went there.
I caught the flurry of emails within 30 minutes of the activity, and was on the horn to everyone, including threatening legal action against the seller for agreeing to mail the camera to a completely different address. The bank credited my account almost immediately, and I changed my passwords immediately on everything.
I looked up the address the thief wanted it sent to - turned out to be a internal stop number at a shipping warehouse on the docks near Virginia Beach. A Google search revealed that most of the names associated with the warehouse were Russian. It sounded like a Law & Order episode about the Russian mob. Probably a lot of theft and smuggling going on thru that conduit.
What was really frightening about this was seeing the messages on my eBay account supposedly coming from me, going to the seller. I halfway thought of getting an empty camera shipping carton, filling it with dog poop from my yard, and mailing it to the address at the warehouse, and enclose a note saying, "Busted, you POS". Thought better of it. They know where I live.