That makes sense, thank you. I still can’t see why CCB and IRF both hit my card. It is all very weird and alarming.
Contact the bank and the banking authorities in your state. It is at least wire fraud. And find out, if you can, how they got your card information. I suspect that the bank will be the easier way to track this down, they have to comply with at least minimal reporting requirements in order to operate. It’s also a good bet that there is one (not two) incidents where your private account information was compromised. Keep following the trail with the bank. Of course they will put you off, but you can contact state civil agencies and get them to respond at least minimally. They have to know the account transaction information.