I think the KEY with using Paypal is to NEVER EVER EVER click on a link for Paypal. Anything Paypal would contact you for you will see if you log in by typing
www.paypal.com.
I remember a few years ago, I got an Ebay notice that said I had sold something. Er... I didn't sell anything. So I clicked the link and it took me to a log in page. I backed out of the page, typed in
Electronics, Cars, Fashion, Collectibles, Coupons and More Online Shopping | eBay, checked my account, and lo... nothing there about selling anything. If I wasn't paying attention, I would have given a thief all my Ebay info!
The Paypal phishing is the same thing, they say you added an email you never heard of, click this link if you did not. And people click the link and lose their account. If you NEVER click a link from Paypal or Ebay, you can't lose your account. Anything you need to see you can always see by logging in on the https page, after verifying that the .com always comes after the paypal or ebay. I've had people tell me that they've never clicked an email link ever and still lost their account... but I can't see how.