Hi, I got an email today saying I've sent payment of £190 to an email addressat 01:37 am, the next email says XYZ accepted the £190.00 GBP payment you sent on 23 Apr 2018 11:12 am.
So I've got no knowledge of these people or the transaction I've changed my password and noticed in my send and request contacts is an email address who I didn't put there.
I've opened a dispute and changed my password is there anything else I should do? remove the email address from contacts? remove bank details to stop more money leaving my account? or do I just sit and wait?