Ok I'll try and make this short. Last week I had $500 worth of fraudulent charges on my bank card, and I got that sorted out with the bank. Now today I get an email saying that my new $1000 IPhone will be shipped today, but the shipping address was to a house in NC (already filed the police report). The thing is, I don't do online shopping, so my debit information was solely on websites for bills. My phone account had both password protection and an added security pin, and they knew both of those along with my name to place the order.

I have done scans with AVG and AdAware and nothing comes up, and they do scheduled scans every 3 hours. This computer isn't even 4 months old, and I haven't really done anything aside from play FFXIV, D3 and D2. How can I find out if it's my PC that is compromised or if it is my cell phone somehow (which also comes up clean on scans)?

It's possible your card got skimmed at a gas pump, or if it's a chip card, it could have been scanned by an NFC reader. Have the bank cancel it and issue a new card.

It's a chipped card. I did end up getting a new card, and the phone order was done after that. It was tied to my cell phone account billing and not my bank

Reformat your hard drive if you think your PC is compromised. The crap happens daily to people all over the US. I'd listen to what surf punks said.

I've already cleared up the debit card issue

Sounds like you need to change passwords, all of them.

Did it cross your mind that the laptop had pre-loaded spyware, always format new hardware.

If the purchase for the phone was made via your mobile phone account, doesn't sound like ur debt had anything to do with it.

You said you don't do online shopping but you said websites have your payment info... did you give that payment info with that computer?

Run malwarebytes then install and outgoing firewall (TinyWall)

Edit and ofc change all passwords and pins

This post was edited by LulzSec on Dec 9 2016 04:35pm

Seeing how there's many public exploits floating around for firefox I wouldn't be surprised if your computer got compromised. Considering the latest public javascript exploit works on version 43-50.

Reformat and reset everything.

Stop using your phone to pay for shit.

Change your passwords.

Don't share passwords.

This post was edited by AbDuCt on Dec 9 2016 05:52pm

As previously said

Issue new card
Reformat and reinstall all storage drives

Also clear ur google account or webbrowser from stored cards etc

use DBAN u should be fine.

than clean install