You can see a response to all of those issues here by someone who wrote a thorough report on scams:
I. IN GENERAL:1. Before you even fund your account - enable 2FA (SMS or Google Authenticator) for ALL available options through the
security tab in your profile (link);
2. Never release bitcoins from escrow, if you have not received the payment! EVER!3. Do not be fooled by 100% green reputation. Always do your due diligence and check the users that left the reps. If they are reputable with more than 100 deals and more than 10BTCs traded - then you have a legit trader.
4. If you receive a suspicious looking email from help@paxful.com - bad English, bad grammar, etc - try to reply to it! If you get a mail-delivery-subsystem message (link) then the message was not sent from the original mailbox, it just used an mx record to look like it was.5. Never click on links received in the emails from point 4;
6. When posting a Trade, always require the user to at least has verified phone number/email address, 10+ BTC trades, and to be trusted (there is an option for that)!
*Note - I am not in any way affiliated with Paxful, nor am I their employee! Most of the issues occur when people fall for false links, do not have 2FA or go for trades that are way too good to be true. We will be looking into other means by which we can keep our users safe.