If you think somebody else is in your account
Sign out everywhere, then tell us. Both, in that order.
Do this first
Open the Your sign-in page in your workspace and press Sign out everywhere. That ends every session on the account, including one somebody else holds.
The ordinary Sign out button ends only the session in the browser you are using. Somebody signed in elsewhere stays signed in, so do not stop at that.
Then tell us
Open a support case and choose the option for somebody else being in your account. It is marked urgent.
Tell us what you saw that was not yours, such as a change you did not make or an email about something you did not do.
What we can and cannot do
We can see the sign-ins on the account and when they happened, and we can suspend it while it is sorted out. We cannot tell you who somebody is, and we will not. That is a statement about a named person and it is not ours to make.
If money has moved, your bank can act faster than we can. Ring them first.
Related