It all began for Amelia* when she received a call from what she thought was her credit card company in June last year – unaware the number had been spoofed and she wasn’t talking to the bank.