Describing it as a risk is like saying that I risk robbing a bank if someone scams me on Bitcointalk.
PayPal doesn't allow cryptocurrency trades, so in order to have the funds returned, he would have had to lie even though his claim is legitimate, exposing him to potential action from PayPal. How would you describe taking money from a bank against their policies?