While I understand that 7 2 9 7 2 5 is a SMS short-code owned by PayPal. SMS is able to be spoofed. Is the domain py <dot> pl owned by PayPal, and actively used by PayPal in their SMS messages? The WHOIS info for that domain in no way indicates that it's a legit PayPal domain.
... View more