I agree with the others. The most you can do here is inform them of the rules, the consequences should they break those rules, and then just walk the other way if they continue to insist on taking such risks. Even if those risks are on them and not you, if they're showing this disregard to Paypal's TOS, I'd be cautious of how they handle the rest of their business.