Thieves are always looking at new ways of stealing money from people’s credit cards, bank and PayPal accounts and one of their latest tricks is targeting Starbucks app users by first tapping into their Starbucks mobile app.

The Starbucks app lets you pay at checkout with your phone. It can also reload Starbucks gift cards by automatically drawing funds from your bank account, credit card or PayPal.

On Wednesday Starbucks acknowledged that criminals have been breaking into individual customer rewards accounts. Starbucks has advised all customers to change their password and ensure that they use strong passwords. 

Starbucks records obtained by show that all of those payments went to a card registered to the email address [email protected]