It's amazing how some 10 year old kid can get his parent's credit card and walk to his local public library to cause so much damage to a private server.
Example: scammer that PayPal can't detect.
You can all stop thinking about adding crummy terms of service, logs, and screen shots. PayPal will ALWAYS side with hacked victims, especially because PayPal can detect the best proxies.This is the best way scammers chargeback. A scammer goes to his local library, then logs into his PayPal and donates to the WoW server $500 or so. For 3 months the scammer doesn't log into his PayPal at his house, and at the end of the 3 months the scammer does an UNAUTHORIZED chargeback. With this unauthorized chargeback, PayPal checks the ISP from where the payment was made and the ISP from where the unathorized chargeback claim was made, the ISPs will not match. The scammer will get 3 months to enjoy his donation items and 3 months after the payment was made, receive a full refund from PayPal.
What are private server owners suppose to do now with a scam like the one above. I guess the only option is to drop PayPal for good.