Oh crap, posted on the wrong (but similar) thread... so here you go, I'll copy here.
'They called me yesterday and decided to be a bit suspicious and doubled checked, googled it and got here. Decided to call Visa Desjardins' number at the back of my card instead. Seems legit, the woman confirmed they did try to call me to clear up some internet transaction (that I really did). We cleared everything out and that was it, seems like the number is really what they say it is. Or you could do like me and call central and check it out.'