At work I got a shit ton of emails from websites that I never went to asking for verification and password confirmation things like that. I have not interacted with any of them, but I found that there was a $750 watch purchase on my Amazon. I have since changed my bank logins, my Amazon password and my email password, and also removed my payments from Amazon. Plus I made sure my two-factor is still good and deleted some third-party websites that are associated with my email just in case, and I'm still getting these emails. What are the next steps I can take? This is the first time this has happened to me.