varkey
Galvanizer
^ Check with Citi who the merchant is, and send a mail to the merchant directly saying someone used your card without authorization on their website. Most legit sites take fraud seriously and will try to help you out. A charge back will cost the merchant too, and they will try to avoid it.