How did Wallet get my CC info before I did?

There are two ways this can happen.

One is most (all?) banks do automatic updates of all cards in Apple Wallet and any other electronic wallet. Apple has no control over this. The bank added the card to your Wallet and can update cards when they deem necessary. It’s possible that despite the support member saying they wouldn’t <forward> the information they did.

The other possibility is the Payment Network Operator (Visa, Mastercard etc.) updated the card information. Just as an example, Mastercard calls their service Automatic Billing Updater (ABU). The link below is fairly technical. Basically, the PNO updates the information automatically to the merchant. The bank may not have updated the PNO or the merchant as to the fraudulent usage of the credit/debit card.

https://developer.mastercard.com/automatic-billing-updater/documentation/how-it-works/

Apple did nothing.

Your bank would have updated the card in Wallet to the new number themselves.

click here ➜ Change or remove the payment cards that you use with Apple Pay - Apple Support

you might have keychain or remember passwords, passwordless settings on. Call Apple support and they can walk you thru solving it

This article is from one financial service (that I don't use an am not endorsing). It does a pretty good job of explain the system:

https://stripe.com/resources/more/what-is-a-card-account-updater-what-businesses-need-to-know

Itarihere wrote:

you might have keychain or remember passwords, passwordless settings on. Call Apple support and they can walk you thru solving it

Nope, it does not work that way. The Keychain has no information about Credit Card Numbers that the OP was enquiring about. You will also find that the banks are able to update your Expiration Date in the Wallet app of any of their cards.. That is not stored in the Keychain either.

>>Secure Element

The Secure Element is an industry-standard, certified chip running the Java Card platform, which is compliant with financial industry requirements for electronic payments. The Secure Element IC and the Java Card platform are certified in accordance with the EMVCo Security Evaluation process. After the successful completion of the security evaluation, EMVCo issues unique IC and platform certificates.

The Secure Element IC has been certified based on the Common Criteria standard.<<

Apple Pay component security - Apple Support

You’re welcome. I hope you have a great weekend!

but then it would update also thru keychain, etc

Keychain does not have access to Secure Element and cannot update credit or debit cards.

explain further please.

Keychain has not relation to cards in wallet. Not sure what you think Keychain would do.

Keychain stores passwords, not cards. Your Bank cannot access Keychain.

Yes, Keychain wouldn’t run on Java Card Platform.