He was on line at the Bank of America site requesting a one time credit card like we use all the time so we don't give out our credit card number. A message popped up on the screen saying too many attempts when he didn't have any attempts...said to call a number to unlock the credit card...after calling it and being suspicious after they asked for the password he called the credit card safe lock and they checked the number and found it wasn't a valid Bank of America phone number. So someone hacked their site and redirected requests to that phone number...if you give them your password they have access to your credit card...