Thanks for the suggestion. I think this could be implemented using PayPal's Authorization & Capture API (there's also a guide here), that way we don't actually take money out of people's accounts long before providing them a service.
But I'm not responsible for anything money related including the toplist system, so this is something that @ccw would have to look into and implement.