[masraum]

Originally posted by Tshabet
On that note...
Moses, are you sure that the account you logged in to was legitimately Paypal (i.e. not another site made to look like paypal)?
Common phishing tactic is to scare someone into "logging in" to change something, but the login page is actually a dummy and you are entering your legit credentials.

Did you click a link in the emails or did you go to paypal directly by typing the address in your browser? If you clicked a link in one of the emails, then you probably had a secure account that then was compromised.