let me tell you why it was only charged RM35, and why CIMB is more then willing to refund you the RM35 to keep you quiet.

While scammers are more then happy to swipe large amounts on credit cards, they will not do so with a debit card because its linked to an account. No money in account, transaction rejected, the card gets flagged. These transactions are usually done on legitimate sites or via paypal as its easier to go through.

What they will do is test it out with a small transaction, and then sell the card details on the dark web. Once the people who deal in siphoning money out of credit cards gets the card details, they will then use it via shady payment gateways to clear your account right to the last ringgit.

So yes, if your card has been used once for any purchase without your authorization, destroy it and get a new one.