Yes! You're describing a pattern of escalation. And if you have to tell them about it/ get them to sign something first, take all the money out before you let them know. Redirect your direct deposit to a different account if you have to. If you don't do this, it's pretty good odds they'll just take whatever they can, and the bank and police won't do anything about it because it's "their" account, too.