That doesn't answer the question. No app on any Android or iPhone phone can reach out and take your PayPal credentials. These scam victims never own up to the most important fact - that they themselves give away the keys to the castle. There's always some hand-wavy techy explanation.
I think pavel_lishin's comment is alluding to that what we are reading in mvdtnz's comment is victim blaming. It is a bit coded. Being overly concerned what a female victim of sexual assault was wearing is textbook case of victim blaming. I believe this is what the sentence "I bet they were wearing a real short skirt, too." is evoking to say that the sentence quoted from mvdtnz's comment is blaming the victim of the scam.
