The thing that saved me was that I looked up my friend’s PayPal via his cell phone number instead of using the direct link in the FB Messenger. When I called my friend about it - he confirmed it was a scam and rejected my payment. I was saved by my security training - but came “this close” to being a cautionary tale.