That email was tied to a transaction in paypal, making it highly traceable back to myself. In 30 seconds, one could easily remove that from the PDF in Acrobat, but that doesn't mean there aren't other hidden watermarks in the file.

If there are zero hacked accounts ever, sure.

But charging someone $500 for actions a hacker took with their account would be.... very unusual.