[jyl]

This really shouldn't be news to anyone. Scammers and phishers send these emails pretending to be your bank, your wireless company, Amazon, PayPal, etc. The emails have nothing to do with PayPal and are not their "fault".

Never enter sensitive personal information (password, account number, social security number, etc) on any website that you reached by clicking a link in an email. Any email.

To go to a website where you will enter sensitive personal information, type the website's URL directly into your browser. "www.paypal.com" etc.