It is completely wrong that someone can put credit or debit card details from cards which are not their own into a PayPal account and gift it to another account which they can get the money from. This is a scam loophole. If the genuine card holder phones PayPal they say they can only speak to the owner of the PayPal account even if it is not their card being used on the PayPal account!!