in my case, i once let deimos use my account to buy bioshock 2 4-packs, and from the email receipt sent to my email it stated clearly the payment method is paypal.
i doubt that same cc/paypal had been use in different accounts then steam thought this is suspicious?
but since steam reactivated my account without telling me why it got disabled before, i cannot simply make conclusion