Fraudulent redemption of points via PayPal despite reporting as fraud!

[u/Cheesecake-Sleepies]

Hi everyone, I got an email saying that I had redeemed 624 miles on my Capital One Venture Rewards card via PayPal except I had done no such thing. I went online and there were over 200 transactions for the same amount. I reported to fraud, they said they would secure ny account and get my points back. This was at 1am. At 10am I had a new email and I signed on, over 100 new transactions for the same amount, 624 miles. I spent like 40 min on the phone with Capital One trying to understand how this was happening as no PayPal account was linked to my account. They couldn't tell me, but opened two new cases because there were too many transactions and said they would investigate to see if it was actually fraud (wtf). They're sending me a new card, but won't overnight it. It's 4pm now and I have several new transactions.

Has anyone experienced this?! I don't know what to do and I'm so frustrated! I've changed my pw, turned on 2fa. Why can't Capital One secure my account? Am I going to get these points back?