I have a debit card which links to my savings account in a let's call it Bank A. I had never used it for online purchases/transactions (not even interbank transfer). After a while, I purchased virtual credit into my online wallet from an online gaming platform. During the purchase I had to provide my debit card details (number, CVC, expiry date) without authentication. Normally I will receive TAC to confirm the transaction but in this case I did not.
A few days later, I was called by Bank A saying my debit card was frozen due to suspicious transactions (amounted to roughly RM 1xxx) but failed to process due to I had only RM 2xx in my bank account.
Now I am afraid that websites might use my bank details to perform purchases. Will this be the case? Is it true?