It turns out they sent her an email with a link to Paypal and to create her account (so goodness knows what information they have of hers !). I don't know what their motives are Are they trying to access all her details by getting her to set up a Paypal account and then will create fraudulent transactions in her Paypal account OR are they planning to get someone to pick the car up and somehow get Paypal to refund their money (Paypal, I think, will only accept a proof of delivery that has come from a shipping company / carrier) so would easily refund if they were to say they didn't received the car ! I think her paypal account is the most likely target, as they quite possibly are from overseas !