I just recieved 2 spoof emails. One saying that I'd paid $273.99 to a company and the other saying I'd added an email address to my paypal account. These emails look fairly convincing but they didn't ask for me by name. I forwarded them to paypal. Luckily no transaction had taken place. They obviously wanted me to click on their link and give out my details.
Please be very careful, if you get anything similar log into paypal normally never through an email.