Change your password, and remove payment details. They seem to be having a spate of hacked payments going through at the moment. DH has lost 300€. Through paypal so hopefully we'll get a refund but still!