Most commonly, I believe, they are paying with stolen accounts and/or reversing charges. Not only PayPal too, I've been checking some of these hackers sites and they list stolen bank account info too. Anything that is worth any good amount of money has to be escrowed these days.