Yes, paypal can be scammed. He could have deposited bogus echeck or based on stolen checking info. It takes couple weeks for Paypal to find out - then despite all the 'assurance and insurance' paypal has, it will take the money or pursue the money from the recipient.

Happened to me.