Actually when I reread this, you are saying he made online purchases with your credit card not that he used paypal. In fact you have been the subject of an attempted ID theft of your credit card, which means he somehow got your credit card details through paypal.
I am just coming to terms with the recent goings on, so I am struggling to accept that he would do this as well. Oh well, he is off my christmas card list.
Thanks for the info
I will change my passwords, maybe we all should.