This morning my email contained one from PayPal saying my account had been charged by a Gary Kostelec for $100 for a couple of bottles of homeopathic drops. At the bottom of the email there was a button "Cancel Transaction". That leads to a form where you fill in all your personal and banking information. I don't think so!
I checked my PayPal account and there was no trace of it. It came from service.intl@paypaI.com (notice paypaI, not Paypal). I've forwarded it to spoof@paypal.com but it won't go through - maybe they're just overloaded with reports.
Curiously, it came into my business email, not the email I use for PayPal, so the scammers are obviously lifting email addresses from websites.
Be careful folks!
Lynne