If you think you’ve received a suspicious email or have been directed to a fake website, forward it to firstname.lastname@example.org and we’ll investigate it for you. After you send us the email, delete it from your inbox. If you clicked on any links or downloaded any attachments within the suspicious email or website, log into your account and view your transactions. It’s also a good idea to change your password.
Since October 31, 2016, we have the option to select a different payment method from our Wallet default at checkout so payment should've come from your visa if you specifically selected that when you paid. Weird stuff going on with PayPal. Bugs up the wazoo.