Miso, I’ve been thinking about something: if you actually lost your token (did you?), and someone stumbled upon it and tried to log into your online banking, I just don't get how they could pull that off without knowing your PIN... At my bank, Chase, the token automatically locks itself after three failed PIN attempts, and to get it unlocked or even reset, you have to submit a formal, notarized letter requesting access... It seems pretty unlikely that a stranger would guess the right PIN within just three tries, so you should really check if the token was locked by the bank, find out how it got unlocked (if it was), and definitely notify the bank immediately about the loss or theft so they can freeze your online access entirely... Now, if someone you actually know used your token—and you were careless enough to share your PIN with them, which is honestly such a rookie mistake—then that's strictly on you... But still, try to track down which account that money was sent to, then reach out to that bank's claims department, explain the whole situation, and ask them to reverse the transaction back to your account since it was an error... I really think that might work for you because at the end of the day, getting your money back is what matters most, and from what I've seen, banks can often process a reversal based on a formal request from the sender, regardless of why the payment happened in the first place... Just make sure all your sensitive info, like your PIN, stays strictly between you and no one else from now on... Bye!
