I received emails from "service at paypal.com" asking me to make shipping and insurance payments to a china account before my funds could be released. As the email bore a seemingly valid paypal email address, I made the payments. If the whole thing is a scam, is paypal liable for my loss since the company should ensure that only authorised employees can send messages from their email address? (The system does not accept an email address so I used "at" instead of @
