Fraudulent use of Phone.

I have just contracted with Virgin Mobile to enter into an Agreement for an Apple iPhone XR. I have been notified by you that my Apple ID was used on an Apple XR at 7.21am today. As I did not receive the iPhone until this afternoon, I have no idea how this has happened. The courier bringing the parcel was from Yodel, who I understand from Virgin loaded it onto their courier's vehicle at 6.12am today. Please advise what I should do next. Incidentally, I have also been notified by Asda Bank that my Credit Card was used yesterday IN BRAZIL, which makes me wonder if someone has stolen my identity.

Regards - Paul Simpson