[Sooner or later]

Are you sure it is actually PayPal making the request. There have been phishing campaigns in the past.

I use PayPal a couple of times a month and haven't had any new requests.