Is his PayPal account verified with a confirmed address? I know it takes long, but then PayPal can debit their bank account if anything goes wrong.
Also, my wife got a new Nokia N97. The bastard who sold her the phone then claimed the insurance and the IMEI was blocked, so she can't use the phone within the EU :-/
Done her a favour, shit phone.