My wife, bless her heart, checks our account at the bank every morning. This morning's report showed charges in New Jersey, Salt Lake City, and Ottawa.
She called me to confirm they weren't mine (nope, they weren't) and then called the bank's fraud department. They asked her to confirm a few things, then I had to call them & verify my identity ("This is me!" ... heh).
They deactivated my card, credited us for the amounts charged, and filed for reimbursement from the retailers where purchases had already gone through. Cost us a little bit of time, and some minor inconvenience, but nothing more than that.
Whatever other faults Wells Fargo may have, they were on this one.