Yeah, happened to me last year. I was asleep, phone woke me up.. was groggy, not paying attention. Questioning a Capital One charge, but wanted me to confirm my six digit code, which right under says: We will never ask for this. Just wasn't in the headspace. Went back to sleep, two minutes later, wait a minute? Raced to the computer, still had money so I drained my bank account to my fathers. They managed to get like $190 out still, probably trying for more but I had a few holds from depositing money, lol. Live and learn. TD Bank was unsupportive so I closed my account with them.