There's a phishing email going round saying someone has requested a large payment and to ring this number if you think it's a suspicious active. The email address was the proper PayPal one.
I checked my PayPal first and there was a request for a £499. 3 actually. Like an idiot I panicked and called the number in the email (I frigging know better than that!!). I went through security questions and they sent a text verification code which came through on usual PayPal message. Seem legit.
Then the questions got a bit weird (what other bank accounts do you have unconnected to PayPal?) and I got an email saying account password had changed.
I hung up and called PayPal on the website number and yes it was a scam piggy backing off the PayPal email address. All sorted very quickly as they seemed aware of the scam. Password changed quickly, additional security layer added.
(When you get through to PayPal you get a automated bot who doesn'tunderstandan irosh accent, but if you say you want to speak to a real person, it puts you through to a human being!)