I experienced a PayPal screwup like this once. Although I never clicked the confirmation email, the account was apparently still activated and I got purchase notifications for a little while.