The OP is in a unique position.
The CRA fraud dept will require a police report.
At this point, the process has failed for the OP. The OP is now going to have to take a stand and get the required documents filed.
As I stated in an earlier post - It depends on the card issuer. As you have pointed out, you didn't need to do anything more than a phone call. THe OP is in a position where this time has passed and it needs to be documented with a police report and possibly an FTC fraud Affidavit.