This is why you never use signle email for everything, this could end in chain-hacking. Also you should seperate your accounts as much as possible one email for banking/paypal another for shopping etc... But you can use email such as ZoHo for this if you don't trust XFSmail.