Actually, according to the reports, it seams it's Paypal itself doing it. For "verification" (ripoff) purposes, I guess.