He could be using a vpn from the US, however I don't understand why he would do that. PayPal has an anti hacking detection system, this means if you login to an PayPal account from a different country than the account is registrated in, the account will get temporarily blocked until you have given it permission. So, yes it can be a hacked account.

I suggest to not deal with this user...