PayPal says the payment was canceled, but it said before it was sent, so we'll see if they're right now or were right before. I'll keep an eye on the PayPal account and its linked payment account for a few days to make sure the payment really was canceled.
Weird experience. Somehow someone hacked another person's Ebay account and falsely listed an item at an attractive price; when a sale happened the money was routed instead to the hacker's account. It may be the victimized seller was clued in quickly because I immediately sent a request to confirm the order. I was prompted to check right away after I saw the fishy Russian email where payment was being sent.
Anyway, be careful out there.