-
Sorry to hear this - sounds like a huge pain in the arse but it’ll be fine, basically.
Time to enable 2FA on your gmail. Use an authenticator app such as Authy, not sms messages.
You can also use 2FA on PayPal but that’s all sms based.
You can also sign out of all devices from the google settings page.
I’d be curious to try and find out how it happened. Do you use public WiFi networks?
A little update.
It’s possible money weren’t actually taken out. Even though item is marked as PAID, it’s doesn’t mean I’ve paid for it. Possible the seller marked it as paid.
Also got a message from eBay informing me about possible fraud activity on my account.
Will contact the seller now and see what he says...