I have just been phished by spoof PayPal e-mail.
It was to confirm a payment to Astalavista.net, one that, of course, I never made or authorised.
There was a 'button' to press if I disputed the payment.
If you get an e-mail like this, DO NOT PRESS THE BUTTON TO DISPUTE PAYMENT!
Just bin it and report to PayPal, or you may give out vital information off you P.C.

That's one of the reasons why I don't display HTML in emails. I didn't realise how realistic these looked until I bothered to view one in full HTML glory and it was very impressive. Now I realise why people get caught out.

I spoke to paypal and ebay in the past - they said they only contact you through your 'signed' in account - never reply to emails - just bin them !!!

I got one spoof email from Barcleys (as in Bank) unfortunately they spelt the return email address incorrectly - kind of a give-away! KN0BHEADS!!!