How does that signature verification work? Something like a callback to paypal.com to get the verification? (Analogous to downloading an SSL cert from a website

How does that signature verification work? Something like a callback to paypal.com to get the verification? (Analogous to downloading an SSL cert from a website without using a trusted side channel like a handwritten note?)