In part it's my own fault - I should have been more vigilant; my only excuse is that I have a long list of business-related VISA-expenses, and a comparatively small billing-amount can slip by unnoticed.
I am a medical doctor in private practice. Since May 2008 I have been debited $39.85 monthly by a firm with a changing name: first it was PAY-WBTCHARGE, then it called itself PAY-GATTERBILL.COM, and finally PAY-GATTSTERMV.COM.
I have never ever (knowingly) had anything to do with any of these names, nor have I ever subscribed to ANY website, ever, with the exception of two very well known and reputable organizations relating to my work in the field of medicine.
I attempted to find out more by entering the most recent cited name, upon which I was immediately linked to "Secure Gateway Access", another name that I have no recollection of ever being associated with. I used their "retrieve password" tag and was surprised to find out that they apparently have no record or knowledge of my existence, as I was not able to elicit any sign of recognition by entering my name and email-address in the assigned fields - so either the link to this address is being misused in some way, or Secure Gateway Access is itself fraudulent.
Of course I have advised VISA to refuse any further payments, which regrettably won't get back what I've already let slip through, which now has amounted to almost a thousand dollars. What remains very uncomfortable is the unanswered question of how it was possible for someone to debit my VISA-account in the first place; e.g. how he/she/they/it got hold of my name and account-number.