A "week or two" is a rather large window and not even a certainty; especially if you've made other purchases both online and offline with the card. After they steal your info, it could be 3 days or less when they use it, or it could be a month or longer. The first line of defense is to have international transactions disabled, because those thieve rings typically opt for accessing the money using stolen card clones directly at bank ATMs in foreign countries. Last year in my area there were a large number of people who had their credit/debit card info highjacked, most likely from one of the mini-market gas stations which seemed to be the common denominator. Anyway, they can lift your card info just from you walking past them, or when you make a transaction in the store while they're sitting right outside in the parking lot, if they have the necessary equipment & software.