I had something similar happen to me some time ago. I don't normally give my card details to be stored for future use, but having used Lazada for a couple of years, one item could only be bought with payment from a bank card. Duly paid and no problems for a few months then all of a sudden 27,000baht disappeared from my Thai bank. Checked at the local bank and got a statement and a payment of the said amount had been deducted by, of all places, Deliveroo in the UK. There had been two deductions and two additions of 32baht to the A/C prior to the 27,000 deduction. I contacted the bank head office, explained the situation and got my money back with 10 days. Very lucky. However, I removed my bank details from the Lazada web site and will only pay via COD now.