I got the same PayPal email. I actually started filling in the requested information.......
the link they send you to in the email is typed in the email to appear as if it is from a paypal.com domain
https://www.paypal.com.log/restore/wf_ID/01f=ra_default
, however, in reality it is from a UK domain
http://marusha-vont.port5.com
the first level they have duplicated the first level of the paypal login area of their website, and you then enter your registered email address and password. At this point they ask you to verify your bank account and credit card on file with them. Just like PayPal does when you change your password.
Out of dumb luck, I called PayPal and was wondering why my account had been singled out for this, and they told me it was a hoax, and to forward the email to
[email protected], which I did.
THey they recommended that if you had gotten past the login area of this fake site, to reset your password, which I did.
It's a pretty slick operation. When you see the URL in a link in your email and it looks correct, and then the resulting html page that is displayed is an exact replica of the paypal site, you don't think to look in the Address space again to verify the url. I didn't and felt really dumb that I had fallen for the scam.
Glad I did not finish and give out the bank or cc info before I found
out it was.
Just my two cents.