You must never log on into your paypal account from a link which is in email claiming to be from paypal. I always even if i am 100% that the email is genuine log on to the site by writing the address to the browser.