Fraudulent charges to my cc account

[Bill in NC]

Bank of America happily let one merchant re-charge that "one-time number" several months after it expired, for an amount well over the limit I set.

Took 3 months to get that unauthorized second charge removed.

"One-time numbers" are clearly not a panacea.