Many people don't know that Paypal "friends and family" is still risky if the sender used a stolen account. If that happens, you risk your own Paypal account too, because "f&f" is only meant to be used with people you trust.