Maybe clever or maybe just a fundamentally flawed system since my wife was able to access my account last week when trying to create a new PayPal account for another family member.
The "smart" system decided there were enough similarities (surname and bank only) to automatically decide the account being created was to be a duplicate of mine so it just gave her access to my account and she was able to change the password, linked bank account, phone number and owner details before she noticed that the account ID had changed from the new one she was creating to my account ID.
Spoke to PayPal about it and they're about as interested as a carinvore at a vegetarian buffet, just keep telling me I must have given her my password as their uber secure system would NEVER let something like that happen.
Lesson to make sure my PP account and linked bank accounts only ever have the bare minimum in them.
