r/ScamChecker

I came across a website today that appears to be a duplicate of the Metropolitan Museum of Art store website. All Met products are on sale there, many of them at substantial discounts. I entered the site through Google Images and did not realize it was not the actual Met Shop site. I ordered two items. After filling out the shipping and credit card information, I was prompted to pay via PayPal, which I thought was strange given that I had entered my credit card info, but I went ahead and paid via PayPal. A popup PayPal notification on my phone said that a payment had been authorized to someone named Mpho Rasehloka—obviously not the Met. PayPal says I cannot cancel the authorization because it is still pending. I called my credit card company to cancel the card associated with my PayPal account so that this person cannot make further purchases. Is there anything more I can do?