Tell them to get a screenshot of the transaction page. Blur out any CC# if they use one but leave the PayPal e-mail address to show proof.