According to the FAQ, no transaction can be executed without customer authentication using IPN/PIN.
If you see a transaction you don't recognize, contact your bank immediately.
Do not share your IPN/PIN or OTP.
The figures, fees and limits in this answer vary by bank and change over time — confirm them with your bank or the official source before acting.