* PayPal email always addresses you by first name, last name, or business name, and NOT by Dear PayPal User or Dear PayPal Member. (Just verified this - while I was in PayPal, I withdrew some money. Just got an email about it, and the first line is "Dear Tristan Arts". The email is in plain text.)
* If you click a link included in an email that you're not sure is from PayPal, make certain the address at the top of the browser window that appears reads exactly www.paypal.com/us. (The link the spoof provided goes to some place called shepit.org)
* If you are ever uncertain about the validity of the email or the email links, open a new browser window and type in www.paypal.com/us.
Thank goodness my password is not in any language most people would know. It's in Trai'pahg'nan'nog. And with something like 1,500 words in my TPNN dictionary to choose from, with numbers and special characters added for extra protection, alternate spellings, and not all the TPNN words are in the dictionary... I feel secure. And I can change it whenever I want. And then, I can always use Yahgahnii or Dvencoilii words. Plus, I LOVE codes... so I could easily throw in, say, a +1 code just to keep things interesting. Would slow down progress into my account, but it would be secure. Heh heh heh. :-)