[codegeek]

Are you using the latest Payments Intent ? That shouldn't allow attackers to use your Public key and create their own checkout page.