Stop in for a cup of coffee

Riddle me this batman............................


a fraudulent charge from a debit card of my wife that has been sitting in the safe for over a year, not even removed from the paper it arrived on. It is a card from one of my MIL's accounts. How is this even possible?
Likely an internal person that watches accounts that don't get activated then exploit it