Over the past few days, we have received several small donations from people who did not actually authorise the donations. We believe their accounts have been hacked, and the fraudster is using us to see whether (a) the account is live and (b) whether the account owner bothers to check their account for fraudulent activity.
How do we alert Paypal to this? We (and the donors) agree that it was an unauthorised transaction, so we are happy to refund, but this doesn't let Paypal know there is a fraud involved (probably).
