Called Capital One via their app, and between the accent of the representative and some of the procedures in verification, egads I hope that hasn't been backdoored, because there are totally places in those processes where this could be an account exploit.