From www.paypal.com :
At PayPal, protecting your account's security is our top priority. Recently, PayPal members have reported suspicious-looking emails and fake websites. These emails are not from PayPal and responding to them may put your account at risk. Please protect your PayPal account by paying close attention to the emails you receive and the websites you visit.
Please use the following tips to stay safe with PayPal:
Safe Log In: To log in to your PayPal account or access the PayPal website, open a new web browser (e.g., Internet Explorer or Netscape) and type in the following:
https://www.paypal.com/
Greeting: Emails from PayPal will address you by your first and last name or the business name associated with your PayPal account. Fraudulent emails often include the salutation "Dear PayPal User" or "Dear PayPal Member".
Email Attachments: PayPal emails will never ask you to download an attachment or a software program. Attachments contained in fraudulent emails often contain viruses that may harm your computer or compromise your PayPal account.
Request for Personal Information: If we require information from you, we will notify you in an email and request that you enter the information only after you have safely and securely logged in to your PayPal account.
Often, fraudulent emails will request details such as your full name, account password, credit card number, bank account, PIN number, Social Security Number, or mother's maiden name.
If you think that you have received a fraudulent email (or fake website), please forward the email (or URL address) to
[email protected] and then delete the email from your mailbox. Never click any links or attachments in a suspicious email.
To learn more about protecting your PayPal account, please review our Security Tips.
After you click on the Security tips link, it says:
security measures that we take on your behalf, there are steps that you can take to help protect your account.
Website Security
Type in the PayPal URL: To safely and securely access the PayPal website or your PayPal account, open a new web browser (e.g., Internet Explorer or Netscape) and type in the following:
https://www.paypal.com/
Password Safety
Never share your PayPal password: PayPal representatives will never ask you for your password. If you believe someone has learned your password, please change it immediately and contact us.
Create a secure password: Choose a password that uses a combination of letters, numbers, and symbols. For example, $coo!place2l!ve or 2Barry5Bonds#1. Avoid choosing obvious words or dates such as a nickname or your birth date.
Keep your PayPal password unique: Don't use the same password for PayPal and other online services such as AOL, eBay, MSN, or Yahoo. Using the same password for multiple websites increases the likelihood that someone could learn your password and gain access to your account.
Email Security
Look for a PayPal Greeting: PayPal will never send an email with the greeting "Dear PayPal User" or "Dear PayPal Member". Real PayPal emails will address you by your first and last name or the business name associated with your PayPal account.
Don't share personal information via email: We will never ask you to enter your password or financial information in an email or send such information in an email. You should only share information about your account once you have logged in to
https://www.paypal.com/.
Don't download attachments: PayPal will never send you an attachment or software update to install on your computer.
Use Your Account Wisely
Don't share your account: Don't use your PayPal account to collect or transfer money for someone else. These types of activity are often conducted as forms of money laundering or mail fraud and may result in significant criminal penalties. If someone contacts you and asks you to transfer money on their behalf, you should deny the request and contact us immediately.
Increase your security: Become a Verified PayPal member.
Look for legitimate sites: Examine all privacy and security seals before doing business with a particular website and make sure they are legitimate. PayPal is a licensee of the TRUSTe Privacy Program.