I'd ask them to verify first since they are so pushy, if they complain further just tell them it's for your security, or else someone could pay with credit card, call back the transaction once the real person realized they've been had, and then your PP will be charged back with the full amount...