Someone did the same thing to my debit card mid october 2010.. They rang up internet purchases to a total of $3,700.00 (my bank didn't notice this, I did!) All of the transactions were done within an 8hr span starting at 8am.
The charges never actually cleared because the ship to address did not match the address of the card. (some merchancts do this for this exact security reason).
I never had to sign the affidavit because the charges didn't go through... But it was pretty scary seeing that I did not have access to that $3,700 that was in my account in pending!
At my bank, my debit card is a no fault/no risk card if something like this happens. My issue was discovered on friday, and I wasn't able to get the money credited back to my account until monday morning when the office people at the bank came back to work.
I am glad you got this taken care of, its definetly a gut wrenching experience!