What email service do you use? Can you check your login/logout histories or IP Addresses? Gmail allows this, but I'm not sure about others. Clearly this person had access to your email as well, to confirm the withdrawals.
good point!
I only searched for email not for logins. The only problem is that I access from three devices but I'll investigate.
I know that IP geolocation is not accurate but according to Google I have had an access to my gmail account from France 12 hours ago and one from Romania one day ago (two country I'm obviously not in).
This could be misleading but I have now a strong suspect my gmail account is hacked. I have immediatly changed my passwords and I will set up 2FA for that account
Update: On 2/22 I had an access to my gmail account fro Cyprus... Never been there.