access account accounts dead fraudulent gaining glad national obvious offline order paypal product rec requesting usa user verify

I just rec'd an order that looks fraudulent...how do i know this...its obvious when the name
on the paypal account is USA, and the person requesting to be sent the product is a national,
dead give away? I am glad i have taken the product offline until i can verify...

how are people gaining access to user paypal accounts??