If you receive an e-mail from Paypal, even if you have an account with paypal, never click on the link that is included with the e-mail.
Instead, go to paypal.com and log in and check your transactions from there.
If you don’t see the transactions then you just verified that you received a fake e-mail designed for you to click the link and log in, thereby giving them your username and password.
If your receive this email you can forward the entire e-mail to firstname.lastname@example.org.
Do not alter the subject line or forward the message as an attachment.
Delete the suspicious email from your inbox.
Below is the picture of the attachment when clicked, if you notice there is a CANCEL NOW link for you to log in so your username and password can be captured.