I kind of freaked out today when I got this email because I thought someone had hacked my TY points account and linked it to Paypal.

Citi never asked me if I wanted to link my TY points as a payment option on Paypal. I don't.

I dropped everything I was doing called today (from Cambodia) and asked what happened and the agent says "the link happens automatically" when you use the card on Paypal.

I suspect that's not true as I haven't used my card on Paypal in many months.

I think I have two paypal accounts, I can never remember the password to either one.

I asked her to unlink them and she said she couldn't, I had to do it through Paypal, which seems ridiculous to me.

Now I have to figure out which paypal account they linked it to and what the password is and then look for a de-link option there.

Or maybe I should escalate it with Citi and insist that they undo what they just did.