Don't panic! You can disable the merchant and online category from the app. This will stop any unwanted payment. Though please remember, only you know your card PIN so nobody can transact without that.