I had my credit card number stolen via PayPal for game keys bought on G2A. Paypal and G2A both told me too bad. I wrote the General Attorney of California (where Paypal is based) and got the money refunded. It took two months, and in the meantime I had to replace all of my credit cards, my 15 year old Paypal account…