I have a gmail account and a yahoo account. I consider these my spam accounts for anything that doesn't accept email with a + in the name. Over a year ago, I n

I have a gmail account and a yahoo account. I consider these my spam accounts for anything that doesn't accept email with a + in the name. Over a year ago, I noticed that somebody's paypal was set to my gmail account. They had also used my account for payments to Donald Trump (I was getting hilariously desperate and pleading messages for more donations) Banggood, and Amigo Loans (as guarantor) I was able to get information about different addresses they have lived (Ireland - not sure how many Trump supporters live in Ireland, which was weird), what other email addresses they had, etc. In the end, I logged into their paypal (surprisingly easy) and changed their email address to the correct email address, and emailed them their new password. I still get the odd one-off email from other places, such as a damp report for a property in Hemel Hempstead, but at least I haven't had any more paypal messages. I sometimes wonder about the legality of what I did - obviously I did nothing malicious, but I suspect it contravenes the letter of at least one law. But the thought of being made in some way responsible for the security of someone else's finances filled me with dread.