I received an e-mail a little while ago from paypal saying that someone had been trying to access my account abroad and that I should visit paypal and verify my account.
I was suspicious immediately, just seemed a bit weird. But clicked on the link in the mail to see where it took me.
I ended up at this site:
www.medicallab.com.tw/%20/nony/www.paypal.com/cgi-bin/webscr/update.html
Note the weird URL?
The site is VERY convincing and looks identical the the regular paypal site. It will ask to to log in and then they presumably have all your details!
So watch out for it!