There's been a hike in PSN hacking the last few weeks. Seriously to those who hasn't got hacked and has no 2-step authentication, DON'T WAIT.

Sony isn't like Google where it is easy to resolve a hacked account. The incompetence of Sony's support team will render your account SUSPENDED indefinitely, even if you plead till your throat bleeds. More over you we are technically from a different region and under their T&C, they can actually not bother to help you as you are outside of their region responsibility.

And one last thing, never keep your CC credentials on your PSN account (even after the infamous hack a few years back, they start encrypting data). Yes it's convenient and blah blah blah, but PSN is not a very secure platform until today.
Better to just buy PSN cards and manually top up, that way the potential loss is always only capped to your current wallet balance (which is max capped at $150 on US PSN).