FYI, for restricted transfers the seller does not need buyers PAL at all. Here is an alternative way:
1. Buyer and seller agree on the deal.
2. Seller gives the buyer their name, phone, and make/model/serial number of the firearm.
3. Buyer calls CFP and initiates the transfer (seller's name and FA serial are enough to confirm validity). CFP gives the buyer transfer reference number during the call.
4. Buyer sends payment and transfer reference number issued by CFP to the seller.
5. Seller accepts payment and calls CFP to confirm transfer - at this point, CFP had already filled buyer's info on their side. Seller only needs to provide transfer reference # and buyer's name, address and phone number.
6. Once transfer is authorized, CFP issues transfer confirmation letter to both parties, and the seller can request an ATT and ship the item.
This is a lot more secure than exchanging PAL scans. Buyer has confirmation that the seller indeed has the item registered to them. Seller is also covered, because CFP validated buyer's info before money exchange hands, and no one in their right mind would initiate transfer to commit fraud.