Offer your insights or judgment on the input financial query or topic using your financial expertise. Reply as normal question answering

Potential phishing scam?
You need to talk to your bank.  If you're unable to contact your bank until Monday, then wait until Monday.  Don't fixate on the idea that the transaction may "hard post" on Monday.  If it happens, it happens, but it's not the end of the world. Even if the transaction posts, it's not the end of the world.  If the retailer is legit, they will refund your money, although it may take some time for things to get sorted out. Even if the transaction posts and the retailer is not legit, it's still not the end of the world.  Your bank may help you in trying to recover the funds.  That's why you need to talk to your bank. As you have realized, blindly calling the number in the email is not a good idea, because if it's fake, you're calling the scammers.  Instead, what you should do is try to contact your bank through known trusted channels.  That is, look on your bank's website.  Do they have a phone number listed for fraud reporting or related inquiries?  Is it the same number you see in the email?  If so, you can call it.  If it is not the same number, but the number on your bank's website is a 24-hour number, you can call them at that number and tell them the situation. Based on what you've described, my own guess would be that the retailer is legit, but that the unusual large transaction was flagged by your bank as potentially fraudulent, which is why you got the email.  The fact that you happened to get the email just after canceling the order could be a coincidence.  This is especially true if all this happened in a short time.  Information about these transactions can't be transmitted and analyzed instantaneously, nor can emails be sent instantaneously; there may have been a delay in sending the email so it only arrived after the cancellation. As far as your worries about how "enfact" got your info, it is likely a fraud-detection service used by your bank.  Doing a bit of googling reveals that it appears to be a legit service, but there have also been instances of phishing attacks using faked "enfact" emails.  However, from what I see, these worked by trying to get you to click on a link, not call a phone number.  Also, if a scammer is able to send you a scam email that includes your actual order details, that's not a phish, it's an outright hack.  In that case the bank and/or retailer (whichever was hacked) would certainly want to know about it and would likely fall all over themselves trying to refund your money to avoid negative PR.