Yes, it is possible to pull money from the bank account linked to your debit card with just the card # and expiry date if the fraudster processes the transaction from a jurisdication that does not mandate two factor authentication. (India mandates 2FA for online card payments by way of CVV and Mobile OTP but many countries outside India don’t).
That the card is a VISA can be inferred from the debit card # alone. It’s not relevant that you’ve disclosed the fact separately.
It’s not well known that a credit card or debit card transaction can be successful even if a wrong CVV is entered. Sadly the fact that you have not disclosed the CVV won’t protect you.
GTM360@GTM360TIL that a credit or debit card payment can go through even if you enter a wrong CVV. You gotta wonder how safe is Card on File. https://stripe.com/docs/radar/rules#traditional-bank-checks … via @stripe
Rules | Stripe Radar
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
stripe.com
The caller is unlikely to use your debit card by himself or herself. The way it works, they work for crime syndicates who sell the illicitly obtained card details to the highest bidder on the dark web. The buyer of your debit card info will be the one who will eventually attempt to pull money from your bank account. That might take a few hours / days.
You should immediately report this incident to the Bank that has issued the debit card.
- If you have not already lost money, ask the Bank to block your debit card. This should happen quite easily.
- In the unlikely event that you have already lost money, ask the Bank to block your debit card AND file a dispute with the Bank. I know that credit card enjoys far more fraud protection than debit card but, AFAIK, you’re entitled to file a chargeback claim for at least a portion of your loss even on debit card transactions. Be prepared to be told by your Bank to contact the Merchant – the fraudster in this case – for resolution. Push back against the Bank, saying debit card enjoys fraud protection, so it’s the bank’s job to get the money back from the Merchant, not yours. Expect to be told by your Bank to run between the pillar and the post for a couple of weeks or months. But, eventually, if you keep pushing back consistently, you should be able to retrieve your lost money.
Best wishes.
Next time, seriously consider switching to credit card. It offers many more advantages compared to debit card, UPI, Zelle, FPS, and other bank account linked digital payment methods. Ketharaman Swaminathan’s answer to Which is better, using a credit card or using a debit card?