That is weird. It really doesn’t sound like something Paypal would “say”. When a fraudulent payment is made, their usual process is to cancel the transaction plain and simple. The fact that they didn’t means either that there is more to this story than what you told us, or that there is misunderstanding/miscommunication between you and Paypal.