PayPal's challenges go beyond bogus accounts