What they did was not ethical to say the least, if was not illeg
To say the least, what they did was not ethical, if was not illegal. However, you do not have any records to prove what you said, it would be very hard for you to argue with them. Just pay it, and write and tell them politely not to do it again. Keep a copy for yourself.