My older brother was at a conference in Warwick a few months ago. Shortly after the conference had broken for lunch, he received a call on his company mobile phone, purporting to be from First Direct, advising him that his wallet had been stolen. He asked how they had got hold of his company mobile number only to be told, they had rang the company he works for to try and contact him and had been given this number. They went on through the address details etc on the card and finally asked for his pin number so that they could cancel the card. Only after he had told them and the call ended, did he wonder why they would ask for his pin. He then rang First Direct and they put a stop on his card straight away. From receiving the first call, to phoning his bank could only have been about 5 minutes and yet the scammers managed to deplete his account to the tune of over £2000.
The police are involved now as they have a person buying goods in Tesco, with my brothers card, on CCTV. They also have another person using the same card a few minutes later withdrawing cash at an ATM.
First Direct have been very sympathetic and have refunded the money lost, but only as a gesture of goodwill. Technically, they could refuse as my brother passed his pin number on to a third party. (albeit innocently)
Incidentally, when he returned to the suite the conference was being held in, a few other people had had their cards stolen whilst they were out for lunch.(lunch was in another section of the same hotel the conference was being held at , so coats etc were left in the conference room).
Apparently the police told my brother that the hotel where the conference was being held was known for bank and credit cards being stolen there.