I've had about 5 emails claiming to be from PayPal, saying they are limiting my account, and another one saying I am violating their terms. It's asking me to click a link and sign in. When I hover on the link, it shows a weird web address. The email goes in to my junk folder too, and says Dear Customer rather than my name (it even says at the bottom of this email 'We'll always address you by your name'). Idiots.
I put the email address it came from into Google though, and it's confirmed on the PayPal website that the address is genuinely one of theirs 
But the email is definitely a phishing one.
Can they do that? Hijack a genuine email address?