If Dwolla, Skrill or another PayPal competitor is paying attention they might be wise to pay the kid a bounty in the interest of "improving the integrity of transactions on the web" even if it improved the security of their main competitor.
Would do right by the kid and would tremendous free publicity for the companies looking to supplant PayPal.
You clearly understand the value of good PR more than most, certainly more than PayPal...Something like that might make me consider closing my PP account for a competitor.
Would do right by the kid and would tremendous free publicity for the companies looking to supplant PayPal.