Exactly. I recently used paypal to pay my gold membership just days ago. Paypal thought the charge was not authorized by me so they let me go through their verification. Which was to not only verify my credit card (again) but also verify home address by a phone call. ONLY A HOME ADDRESS. They do not allow cell phones. That way they can easily verify the address.
This would be a good step to take here also.
Just my two cents! Trying to help.