One might think there would be a way in the credit card website to report a suspicious transaction.
And indeed, there's "dispute transaction", but only for transactions that have already posted. This one has been authorized but is still "pending", so there's no such button.