I have received a debit card from OnePay by mail. I didn’t register for their service. It looked fishy to me, but I called their customer service, they requested my last 4 SSN and date of birth to investigate. I insisted them to check if there exist such an account without that info but no luck. I was hesitant to provide my sensitive info. The card is issued by Coastal Community Bank. Should I call the bank instead? Does anyone have similar experience? Planning to report it to FTC and local police. Have already security freeze on file for all credit bureaus for years. Have also checked ChexSystems report, but shows no activity. But this has happened. Thanks