Hello, I have made a payment to a website online via my debit care. The next day, my card was somehow used for payments that I did not do (eg. electricity bills in the US while I live in Australia). I called the bank and informed of my card being fraud. The bank also refunded me the payment I did online with the website. Now I have been contacted via the website requesting me to contact my bank to cancel the refund. The statement goes: 'We have today received a request from our financial institution for a refund (or charge-back) of credit card payment made for your Premium membership of (name of the website). Should you not cancel your request for refund of this payment then we will be forced to reveal any and all information held by 'company name' to identify you to our financial institution as having actually made the transaction in question. Some of the things we have to reveal are your email address, any photographs that will personally identify you, private messages sent and the IP addresses (your computer's digital address) that you have used to access (website) and particularly when you made your payment of $75 on 19/08/2016 at 08:02 pm AWST. If you do not return an email response, we will have to look at forwarding your information also to our attorney for further investigation.' They already have cancelled my membership. I sent a message back saying that the information was leaked when I used the website and what is their responsibility towards my card information being leaked. It seems like a blackmailing the way they say 'If you do not return, or cancel payment we will have to give away you and your identity'. My question is what do you think and if I decide to not cancel the refund, can they go ahead with any legal action against me?