I had an interesting experience. I had an interaction with a merchant who uses PayPal. I did not authorize the merchant to withdraw funds from my account. I reviewed my account and found that the merchant had submitted a billing to paypal and received the funds to cover that invoice from my account without my authorization. I did not receive the normal notifications from PayPal. I discovered the incident on reviewing the account. The merchant suggests that someone must have hacked my account and for some unknown reason decided to pay them (very strange!). Is it possible for a merchant who meets some higher PayPal security level has access to my account and then can actually draw funds without my approval? Thanks