Just discovered today that someone has made nearly $6,000 in fraudulent charges against one of our company credit cards for Google AdWords. We have never, ever, had an AdWords campaigne and have intention of ever having one in the future.

The charges started small, around $65 the last of May, and then daily charges began the first of June for ever-increasing amounts. I suspect whoever it is was working their way to our credit limit.

We called the card issuer and had no trouble at all. They immediately recognized it as fraud and are investigating.

What I want to know is, has this happened to anyone else? Do you think it is Google (or someone inside Google) or one of our suppliers that has our card numbers? We have been very careful about card security and have given the numbers only to our suppliers.

Also, since the card issuer has removed the charges, the fraud is essentially aganst them, not us. As such, is the card issuer likely, or required, to tell us who did this ... assuming they find out? If it's one of our suppliers, we need to know so we can terminate them.

Thanks.