I have just recieved an email from supposedly Paypal to an address that I dont use for paypal wanting to "update " their records.
Also the website attached to the email starts with http/ compared to the real paypal website starting with https/ the S meaning secured.
Just be careful out there folks.