I received a text today confirming the withdrawal of $99 from my PayPal account to a bank I've never heard of. I certainly didn't initiate such a transaction. I called PayPal support. Neither they nor I could find such a transaction in my account, but the sender of the text was PayPal's [removed]. I definitely had a break in to my account a week or two ago, and I have changed my password twice.
There was no link on the text for me to click on, so I don't see how it would do me harm.
The support person advised me to forward it to phishing@paypal.com, but I don't expect communication from them.
Should I be worried?
