I got solid doubts whether it is legal or illegal.It's true that many people use VCC's to verify their paypal accounts since they do not want to hassle with bank process and most of them do not want to involve their credit cards to their transactions due to hijackers.