An FC member in my FC is experiencing the same thing.

Apparently, he's been buying Tin pieces for a few million gil outside of his control.

So... this is an interesting way to get hacked.

Speculation: Trading or interacting with another character reveals their session ID then a session ID login is used (I thought they fixed this exploit though).