Lexi if you used your credit card you shouldn't have too much of a problem. I would also send the credit card a link to the BOI as evidence that it is likely a scam and / or a fraudulent transaction. I wouldn't even wait, I would do it asap and save yourself any more stress.