Someone started a chargeback case on paypal and the start of the email from paypal reads:

Dear ........,

One of your buyers filed a chargeback with their credit card provider. The buyer stated that they didn't authorise this purchase.

Here are the details of this case:

Is it normal for a buyer to not have authorised thier own purchase?