Can you screenshot your "addresses" tab? I don't understand how you have a 3-type address in electrum rather than a bc1-type one...
The default derivation path is native segwit on Android Electrum wallet, but you can import the master private key of nested segwit to give 3-prefix address or that of legacy address to generate 1-prefix addresses. You can also import the private key of such addresses directly on Electrum wallet. What is going on here?!?!!?
Someone has access to you wallet seed phrase or the private key you imported on the mobile electrum wallet. The best is to not use the compromised wallet again. I have not heard of malware that steals in such this way on Android Electrum wallet, but nothing is impossible when it comes to malware device invading, better to factory reset your phone to free your phone from malware. If you know you want to download wallet on your phone, you will need to protect it against malware by not going online the way you want, making use of ant-malware and visiting the right sites not fake ones that can install malware on your device. Also make sure you trust no one with your seed phrase or private key, someone can get hold of it and use it to compromise your wallet. 
