Bit late in this particular case, but my main advice would be never to pay for anything online with a debit card - always use a credit card as they've got more consumer / fraud protection.
I also generally use Paypal if it's offered as it means I don't need to give my card details to anybody untrusted. I've been defrauded once via Paypal and didn't even notice - I only realised when Paypal sent me an email telling me they'd detected a dodgy transaction and blocked it for me.
Your GF's bank will have a specific process for you to follow from here.
Bit late in this particular case, but my main advice would be never to pay for anything online with a debit card - always use a credit card as they've got more consumer / fraud protection.
I also generally use Paypal if it's offered as it means I don't need to give my card details to anybody untrusted. I've been defrauded once via Paypal and didn't even notice - I only realised when Paypal sent me an email telling me they'd detected a dodgy transaction and blocked it for me.
Your GF's bank will have a specific process for you to follow from here.