This is copied directly from the PayPal website under the Common Questions section at the bottom of the page.
FAKE PAYPAL EMAILS - PHISHING
Advice on how to handle "phishing" attempts to steal your personal information. Avoid email scams and spot fake emails claiming to be from PayPal.
Fake PayPal emails – phishing
You may receive a fake email that claims to be from PayPal. Sending fake emails is called "phishing" because the sender is "fishing" for your personal information.
The email may ask you to:
Visit a fake or "spoof" website and enter personal information.
Call a fake Customer Service number.
Click an attachment that installs malicious software on your computer.
If you suspect an email is fake, don't open it. Don't reply to the email, click any links, or download any attachments. If you have clicked a link or opened an attachment from a suspicious email, report the phishing email or spoof site as soon as possible so we can help protect you and other PayPal members. Please forward any suspicious emails to
spoof@paypal.com. Then, delete the suspect email.
How to protect yourself from fake emails
When you aren't sure if you can trust an email claiming to be from PayPal, here are 2 guidelines that can help you to spot the real from the fake:
PayPal emails will always use your first and last name, or your business's name.
PayPal emails will never ask for your personal or account information such as credit or debit card numbers, bank account details, driver's license number, email addresses, or passwords.
Never click a link in an email that requests personal information.
Any time you receive an email about your PayPal account, the safest and easiest thing to do is to open a new browser, enter [
www.paypal.com], and log in to your account. You can also send us an email by clicking on the "Contact Us" link at the bottom of every PayPal webpage.