Poisoned gift

Hello Reddit. I am registering especially for this story and to know the opinions. It is 03/05/2025, I work from 10 a.m. to 6 p.m. that day. In the afternoon I decide to take a break (3 p.m. to 3:30 p.m.) and go get a coke from the vending machine 3 floors below, with my bank card (which was my trust when I noticed that the vending machine is coin-operated). Without much caution I put my card in my blouse which will go to the dirty (with my credit card inside). Arriving the next day on 06/03, I noticed the absence of my credit card in my wallet and remembered the scene of the day before. I go straight to my bank to make sure no one has used it, verdict: -124.90 e on 5/3, damn. I called the bank, filed an objection and filed a complaint in the hope of being reimbursed fairly quickly. Too bad, someone treated themselves to a treat (the payment is virtual and on a site which at first glance the title is dirty). The next day, a Colissimo message "Your package xxxxxxxxx arrives. Follow it here: sms.laposte.fr/bHVQm. For secure delivery, present the code xxxxxx". Another scam I tell myself. I got up, and the package was there (it was 03/07). I open without suspicion, my birthday was shortly before. And there, a package from the said brand that I thought was more than cute, with lingerie: "a heart hook" in transparent lace size 42 (I'm 40). No word apart from brand marketing. On the order form it is written that it was placed at 10:30 a.m., 30 minutes after I arrived at work. And my credit card was still in my bag at 3 p.m. I call the brand: no name other than mine, no affiliate account, just my email address ending not .fr and not .com and my name on the package well written but not in two words. No more news. I called my ex, without much result apart from his concern. And no other suspicions about a possible grudge. Thanks for reading. Your opinions? A Troll? Or will we maybe be able to find the person one day?