John I don't know if this has anything to do with this but for ever I have
had forms come through apparently asking me to confirm what look to me like
valid transactions from PayPal. The forms look identical to a PayPal screen
but because I know PayPal would never send these I NEVER click on these.
When I look at the form there is ALWAYS a spelling mistake or giveaway
somewhere.

I am wondering if you have ever clicked on something like that inadvertently
in a hurry?

I got several some time back that were scary. They were actually pretty
darned close to valid transactions I had made. The right amount, the right
store, the right location etc. How they knew that I have no idea. But of
course PayPal would NEVER ask me to Login and authorize.

Just a thought.

John