To say the least, what they did was not ethical, if was not illegal. However, you do not have any records to prove what you said, it would be very hard for you to argue with them. Just pay it, and write and tell them politely not to do it again. Keep a copy for yourself.