The scam saw customers diverted to a fake website where credit card details were harvested by the attackers.

So you've gone through your credit card statements, and you've noticed several payments that don't add up. What do you do? That depends on how you made those payments.