I found out they had set up an automatic payment via PayPal, which meant they could take whatever they wanted from my bank ...