Or, and I am just putting it out there you account password was hacked / found out a while ago. Until you went to do a deal it was not worth doing anything with.
Kind of like when malware is dropped on a computer and the threat actor pokes around a bit finds nothing and leaves. Weeks / months later comes back in and finds a bitcoin wallet or a list of banking usernames and passwords or whatever. The user is going nuts trying to figure out what happened, what they did yesterday / last week / last month. But, in realty it's been lurking since last year.

-Dave