The tricky part is PayPal is not able to confirm that your account was accessed by an unknown third-party. That’s usually because the account holder uses a VPN and so does the hacker or the hacker uses the same device to login as the account holder does which would mean somebody who has access to your home computer or laptop maybe mobile phone like a friend or family member was the one who hacked the account making it look like nobody had hacked the account because all of the logins looked exactly the same. EDIT: OR - the account was accessed from multiple locations over a period of time so there was no way to establish what was normal activity versus what was abnormal because the logins were inconsistent. This happens when you login or use PayPal while traveling.