||Credit Card fraud, maybe? How did this work?

An extra credit card was sent to my address from my bank despite the secured app on my phone being the only possible way to order a new card. Also, no big expenditures can be done on the card without the app as dual factor authentication. My bank says they do not know how/why. You are not my bank. Any ideas?[more inside]posted by frumiousbtoWork & Moneyat 7:01 PM -5 answers