Well, the fucker who managed to swipe my VISA card number, that's who. Over the last two days, (s)he spent $9.45 at a UK restaurant I don't know, $5 at another UK store the name of which I can't even remember, and gave $80-odd to Christian Aid UK. What a weird set of priorities for a thief. (Or maybe not, though $80 seems a little low for full-fledged redemption.)
Anyway, the account (which I've had for donkey's years) is now closed, and the charge-dispute process is underway, and the credit union is sending me a new card from a new account. So that's another 16-digit number to commit to memory. More annoying than anything else.