First thing to do before you do anything too drastic is look carefully at all the emails you have received from 'PayPal', or whoever it may be. Look at the source of the email so you can see the actual full email address it came from so you can confirm right away if it is a legit PayPal email address. If it is, it still may be just displaying as that, but when you reply to the email, it would be sending to an alternative email address. Check the actual email address that you have sent the replies to as well (again, in the email source). If it turns out that the email address(es) are not legitimate PayPal email address, especially the reply to email address, then contact them asap and inform them what's happened and they should tell you everything you need to do to protect yourself. Hope it all works out ok for you. Thank you all so much, changed bank details and sorting things with Spoof Paypal, waiting on a reply to what happens next, i can't believe i didn't see it was a scam Glad you got it sorted mate.