I would not risk to accept Paypal from all users, the one sending the Paypal should be at least Full Member and maybe Member (with at least some trust), no lower.