If he is truly your ex-boyfriend, you need to extricate yourself from this situation.  Although it may not technically be legal for him to sign into your bank as you and make a payment, proving you did not consent to this would be difficult at best.  Change your passwords as soon as possible so that he can not log into your account as you.  Next cancel the credit card as soon as you can and arrange to pay off the balance.