Thats a Ham Radio callsign it's been my experience that you can trust them, my advice would be to go to
http://www.qrz.comand type his user name in and You will see the two match up. So it's now a little less fishy, but I agree thats a bit much this day and age too bad really. I mean to have to pay extra money to get the security of paypal.
