Girlfriend bought skin products for £5 off a website..

She's just looked at her online banking and found that today they've taken two £58 payments out of her account..

What can she do?

She's with HSBC.