The whole thing reeks of overly aggressive automation. And while Google has reverted these cases, i fear they have not changed their automation to match.
I am right now looking at two stories of people that has trouble with Google because of some security system or other has picked up "oddities" in the payment activity.