Funny you should raise this! I was looking at my Paypal the other day and I saw a charge for a Minecraft skin pack - it wasn’t that I’d stop my 4 yr old son having it, it was more how the hell did he do it?!?
I had £385 in there at the time and he could have literally spent the lot!
Turns out when you pay via paypal it ‘pre allows’ payments from that point on, without a password in this case!
I had to go in and remove like 50+ pre approved vendors! I was astonished how I could miss such a thing as I am really careful like that!
Cheeky gits!