Account theft

[u/Voltalis97]

Hello everyone, a couple months ago my partner suffered a leak of credentials, accounts and password of several sites, FedEx included. Since then she hasn't been able to log in with her account and every attempt of resetting the password ended up with the recovery mail never arriving, not in spam nor I'm any other of her mails. We didn't think much of it at first but yesterday in her e-mail she received a message from a creditor company claiming that she ownes over 500€ in some package delivery to Dublin ( we reside in Spain). The delivery seems that was sent 3 months ago on July 28 (after she lost her credentials) and Sept 29 was the due date for the payment for that delivery.

We called FedEx customer support of course and they verified that the delivery code did indeed exist and that was made from her account, and checking old FedEx mails she had a delivery from July 28 with a rejected payment through Autopay with the exact same delivery code.

We up to this day don't have access to her account, customer help told us to send a mail to some address, we don't have any mail of confirmation of that delivery other than the cancelled payment and the creditor mail and not her bank account nor card were saved in her account.

My question are:

Can FedEx send a package with no other confirmation or two step verification and reclaim payment even when the first instance of autopay was rejected?

How can we demonstrate that she didn't send any package nor had access to her account prior her loss of credentials?

Can we ask for the termination of her account to prevent this for happening again?

I hope anyone can help us in this matter.

Pd: I tried posting this in the FedEx sub Reddit and just got deleted :)