Google refused to help me in any way.
Is this standard practice?
To me, it seems mind-blowing that I could suffer a theft of my personal information and money; Google has full knowledge of exactly what happened; and Google won't take any action to help me, including the basic actions of reversing the payment or removing my unauthorized payment method from the 3rd party account.
Google's abdication of care for my wellbeing, essentially punting it to my credit card company, forcing me to cancel my card, and leaving me with uncertainty over the nature of this attack or its scope, seems wrong. Am I crazy here?