Curiously, there have been no fraudulent charges on my voip.ms account. I just turned on their 2FA (time-based auth thing) feature, and it appears that my "API configuration" is disabled. I did change my password as well.