I forward any and all mail from PayPal to
spoof@paypal.com. The replies have always, ALWAYS confirmed my suspicions that the e-mails were fraudulant. ALWAYS. No matter how official the mail looks, I never reply to an e-mail from PayPal without forwarding it to spoof first. The penalties for this sort of thing should be the same as armed robbery. It's more dangerous to the world economy and commerce.