Of course, PayPal should not hold you liable for an unauthorized transaction on your account. PayPal should have carefully investigated your claim, and if the facts are as you say, refunded the $303.