Notify your c.c. company/companies of potential fraud and have them contact you for confirmation of any debits to your account.I wonder how long it takes before they start calling?
Even though I removed all of my accounts from PP, from what I researched online, I need to actually CLOSE all those CC accounts and get new C numbers so PP cannot charge my CC's that I did have on file with them. Just because I "deleted" them off of PP does not mean they did not keep the info.
In fact, this happened with me recently. My husband recently traveled out-of-state and made some unusually high charges on a credit card. (We don't use that card often so with the high value purchases and the out-of-state use, this raised a red flag with Citibank.) They called and I confirmed that the charges were legitimate and the payments went through.
In your case, if paypal tries to do the same, they'd call you and you could let them know that it's unauthorized.